Allow editing form data which is submitted by "that" author

Hi,

This is an interesting question. After checking around, this is the solution I found:

Step 1: set the post author when submitting

add_filter( 'rwmb_frontend_insert_post_data', function( $data, $config ) {
    if ( $config['id'] !== 'my_form' || ! is_user_logged_in() ) {
        return $data;
    }

    // Set current post ID as the author of the post.
    $data['post_author'] = get_current_user_id();
    return $data;
}, 10, 2 );

Step 2: check if the current user is the post author

add_filter( 'do_shortcode_tag', function ( $output, $tag, $attr ) {
    if ( $tag !== 'mb_frontend_form' || $attr['id'] !== 'my_form' ) {
        return $output;
    }

    // Check if current user is the post author.
    $post_id = filter_input( INPUT_GET, 'rwmb-post-id', FILTER_SANITIZE_NUMBER_INT );
    $post = get_post( $post_id );
    if ( $post->post_author != get_current_user_id() ) {
        return 'You are not allowed to edit this post';
    }

    return $output;
}, 10, 3 );

If you try to edit the existing posts, then only admin can edit them. Because their post author is the admin (technically when submitting posts, the plugin doesn’t set the post author, and that falls back to the admin).

This code will work with new submitted posts, where the code in the step 1 sets the proper post author.

For the existing posts, you need to set the post author manually. Then the code will work properly.

Sorry, please try this code for the 2nd step:

add_filter( 'do_shortcode_tag', function ( $output, $tag, $attr ) {
    if ( $tag !== 'mb_frontend_form' || $attr['id'] !== 'my_form' ) {
        return $output;
    }

    // Check if current user is the post author.
    $post_id = filter_input( INPUT_GET, 'rwmb-post-id', FILTER_SANITIZE_NUMBER_INT );
    if ( ! $post_id ) {
        return $output;
    }
    $post = get_post( $post_id );
    if ( $post->post_author != get_current_user_id() ) {
        return 'You are not allowed to edit this post';
    }

    return $output;
}, 10, 3 );

Dear Tran,
I have the same issue but my scenario is different I am creating a survey form and it is a two step form so I am first saving the form and in second step displaying second step fields depending on first step selection so I am redirecting to edit. This survey is private and so there are no users created in the process, I already created a form in a logged in status so the error didn’t occured and now I am testing without user and its showing me ‘you are not allowed to edit’ can you please tell me how to allow this to guest. It will be helpful for me.

Thanks & Regards,
Calpaq