WP_REST_Comments_Controller::get_items_permissions_check( WP_REST_Request $request ): true|WP_Error

125	public function get_items_permissions_check( $request ) {126		$is_note          = 'note' === $request['type'];127		$is_edit_context  = 'edit' === $request['context'];128		$protected_params = array( 'author', 'author_exclude', 'author_email', 'type', 'status' );129		$forbidden_params = array();130 131		if ( ! empty( $request['post'] ) ) {132			foreach ( (array) $request['post'] as $post_id ) {133				$post = get_post( $post_id );134 135				if ( ! empty( $post_id ) && $post && ! $this->check_read_post_permission( $post, $request ) ) {136					return new WP_Error(137						'rest_cannot_read_post',138						__( 'Sorry, you are not allowed to read the post for this comment.' ),139						array( 'status' => rest_authorization_required_code() )140					);141				} elseif ( 0 === $post_id && ! current_user_can( 'moderate_comments' ) ) {142					return new WP_Error(143						'rest_cannot_read',144						__( 'Sorry, you are not allowed to read comments without a post.' ),145						array( 'status' => rest_authorization_required_code() )146					);147				}148 149				if ( $post && $is_note && ! $this->check_post_type_supports_notes( $post->post_type ) ) {150					if ( current_user_can( 'edit_post', $post->ID ) ) {151						return new WP_Error(152							'rest_comment_not_supported_post_type',153							__( 'Sorry, this post type does not support notes.' ),154							array( 'status' => 403 )155						);156					}157 158					foreach ( $protected_params as $param ) {159						if ( 'status' === $param ) {160							if ( 'approve' !== $request[ $param ] ) {161								$forbidden_params[] = $param;162							}163						} elseif ( 'type' === $param ) {164							if ( 'comment' !== $request[ $param ] ) {165								$forbidden_params[] = $param;166							}167						} elseif ( ! empty( $request[ $param ] ) ) {168							$forbidden_params[] = $param;169						}170					}171					return new WP_Error(172						'rest_forbidden_param',173						/* translators: %s: List of forbidden parameters. */174						sprintf( __( 'Query parameter not permitted: %s' ), implode( ', ', $forbidden_params ) ),175						array( 'status' => rest_authorization_required_code() )176					);177				}178			}179		}180 181		// Re-map edit context capabilities when requesting `note` for a post.182		if ( $is_edit_context && $is_note && ! empty( $request['post'] ) ) {183			foreach ( (array) $request['post'] as $post_id ) {184				if ( ! current_user_can( 'edit_post', $post_id ) ) {185					return new WP_Error(186						'rest_forbidden_context',187						__( 'Sorry, you are not allowed to edit comments.' ),188						array( 'status' => rest_authorization_required_code() )189					);190				}191			}192		} elseif ( $is_edit_context && ! current_user_can( 'moderate_comments' ) ) {193			return new WP_Error(194				'rest_forbidden_context',195				__( 'Sorry, you are not allowed to edit comments.' ),196				array( 'status' => rest_authorization_required_code() )197			);198		}199 200		if ( ! current_user_can( 'edit_posts' ) ) {201			foreach ( $protected_params as $param ) {202				if ( 'status' === $param ) {203					if ( 'approve' !== $request[ $param ] ) {204						$forbidden_params[] = $param;