Merge pull request #6 from udx/develop-alexey

Require user to be logged in while dismissing Admin Panel notices.

Author: balexey88

changes.md

@@ -1,3 +1,7 @@
+### 1.2.4
+
+* Require user to be logged in while dismissing Admin Panel notices.
+
 ### 1.2.3
 
 * Improve security while processing AJAX requests in Admin Panel.

gruntfile.js

@@ -2,7 +2,7 @@
  * Build Plugin.
  *
  * @author potanin@UD
- * @version 1.2.3
+ * @version 1.2.4
  * @param grunt
  */
 module.exports = function( grunt ) {

lib/classes/class-bootstrap.php

@@ -18,7 +18,7 @@ class Bootstrap extends Scaffold {
       /**
        *
        */
-      public static $version = '1.2.3';
+      public static $version = '1.2.4';
 
       /**
        *

lib/classes/class-update-checker.php

@@ -545,6 +545,10 @@ public function check_dismiss_time( $time = '' ) {
         public function dismiss_notices(){
           check_ajax_referer('ud_api_dismiss');
 
+          if ( !is_user_logged_in() ) {
+            wp_send_json_error( array( 'error' => __( 'You are not allowed to do this action.', $this->text_domain ) ) );
+          }
+
           $response = array(
               'success' => '0',
               'error' => __( 'There was an error in request.', $this->text_domain ),

package.json

@@ -1,6 +1,6 @@
 {
   "name": "lib-ud-api-client",
-  "version": "1.2.3",
+  "version": "1.2.4",
   "description": "UD Client for WooCommerce API Manager",
   "repository": {
     "type": "git",