Skip to content

Conversation

@nikkifurls
Copy link
Contributor

Summary

Fixes #150. Disable Comments disables block notes: The block notes feature in WordPress 6.9 stores notes as comments. Accordingly, the Disable Comments feature in Alleyvate prevents notes from being saved or retrieved. The UI for notes is still visible, making it appear as though a user can write a note. When the user saves the note, an error message appears instead.

Notes for reviewers

We discussed this in #developers and came to the consensus on a solution:
We will enable the REST API comments endpoint, but only provide access to authenticated users, since Notes are always posted in the admin. This fixes the Notes issue, but prevents comment botspam.

Other Information

  • I updated the README.md file for any new/updated features.
  • I updated the CHANGELOG.md file for any new/updated features.

Changelog entries

Added

Changed

  • Enabled the REST API comments endpoint for authenticated users to allow block notes in WordPress 6.9 when Disable Comments is active.

Deprecated

Removed

Fixed

  • Fixed an issue where the Disable Comments feature prevented block notes from being saved or retrieved in WordPress 6.9.

Security

  • Continued to prevent comment botspam by restricting REST API comments endpoint access to authenticated users only.

@nikkifurls nikkifurls force-pushed the fix/issue-150/disable-comments-block-notes-error branch from c7fb4c0 to 8bec518 Compare November 19, 2025 14:53
@nikkifurls nikkifurls marked this pull request as ready for review November 19, 2025 14:53
@nikkifurls nikkifurls requested a review from a team as a code owner November 19, 2025 14:53
Copilot AI review requested due to automatic review settings November 19, 2025 14:53
Copilot finished reviewing on behalf of nikkifurls November 19, 2025 14:56
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR fixes an issue where the Disable Comments feature prevented WordPress 6.9 block notes from being saved or retrieved. The solution enables the REST API comments endpoint for authenticated users while continuing to block it for unauthenticated users to prevent comment spam.

  • Modified the authentication check logic to conditionally disable REST API endpoints and comment queries only for unauthenticated users
  • Updated documentation to reflect that logged-in users can access comments functionality for block notes
  • Bumped plugin version to 3.9.1

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 3 comments.

File Description
wp-alleyvate.php Version bump from 3.9.0 to 3.9.1
src/alley/wp/alleyvate/features/class-disable-comments.php Added authentication check to conditionally apply filters for REST endpoints and comment queries
README.md Added documentation clarifying that REST API and comment count remain enabled for logged-in users
CHANGELOG.md Added release notes for version 3.9.1 with changes and fixes

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@nikkifurls nikkifurls force-pushed the fix/issue-150/disable-comments-block-notes-error branch 7 times, most recently from 53a5648 to 3329c91 Compare November 19, 2025 18:29
@nikkifurls nikkifurls force-pushed the fix/issue-150/disable-comments-block-notes-error branch from 3329c91 to 8e9fa38 Compare November 19, 2025 18:42
@nikkifurls nikkifurls merged commit 1829d58 into main Nov 19, 2025
7 checks passed
@nikkifurls nikkifurls deleted the fix/issue-150/disable-comments-block-notes-error branch November 19, 2025 20:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Disable Comments disables block notes

4 participants