'GET', 'callback' => [__CLASS__, 'get_menus'], 'permission_callback' => [__CLASS__, 'can_manage'], ]); } public static function can_manage(): bool { return current_user_can('manage_woocommerce'); } public static function get_menus(WP_REST_Request $req) { $items = MenuProvider::get_snapshot(); // Filter by capability here to be safe: $items = array_values(array_filter($items, function($it) { $cap = $it['capability'] ?? ''; return empty($cap) || current_user_can($cap); })); return [ 'items' => $items, 'ok' => true, ]; } }