class-media-files-visibility-control.php — Admin and Site Enhancements (ASE) 8.7.2

admin-site-enhancements / classes / class-media-files-visibility-control.php

admin-site-enhancements / classes Last commit date

class-media-files-visibility-control.php

97 lines

1	<?php
2
3	/**
4	* Media Library Access Control module.
5	*
6	* @package ASENHA
7	* @since 8.2.4
8	*/
9	namespace ASENHA\Classes;
10
11	// Exit if accessed directly.
12	if ( !defined( 'ABSPATH' ) ) {
13	exit;
14	}
15	/**
16	* Restrict Media Library/media modal attachment listings to the current user's uploads.
17	*
18	* Notes:
19	* - Restricts only attachment listing queries in wp-admin (Media Library list view and media modal/grid queries).
20	* - Does not affect frontend rendering, and does not block direct access to attachment URLs.
21	*/
22	class Media_Files_Visibility_Control {
23	/**
24	* Filter attachment query args for media modal / media grid.
25	*
26	* @param array $query_args WP_Query args for attachments.
27	* @return array
28	*/
29	public function filter_attachments_grid( $query_args ) {
30	if ( !is_admin() ) {
31	return $query_args;
32	}
33	if ( !$this->should_restrict_current_user() ) {
34	return $query_args;
35	}
36	$query_args['author'] = get_current_user_id();
37	return $query_args;
38	}
39
40	/**
41	* Restrict attachment list view in Media Library (`upload.php` list mode).
42	*
43	* @param \WP_Query $query Query instance.
44	* @return void
45	*/
46	public function filter_attachments_list( $query ) {
47	if ( !is_admin() ) {
48	return;
49	}
50	if ( !$query instanceof \WP_Query ) {
51	return;
52	}
53	if ( !$query->is_main_query() ) {
54	return;
55	}
56	// Only affect Media Library list screen.
57	global $pagenow;
58	if ( 'upload.php' !== $pagenow ) {
59	return;
60	}
61	$post_type = $query->get( 'post_type' );
62	if ( 'attachment' !== $post_type && (!is_array( $post_type ) \|\| !in_array( 'attachment', $post_type, true )) ) {
63	return;
64	}
65	if ( !$this->should_restrict_current_user() ) {
66	return;
67	}
68	$query->set( 'author', get_current_user_id() );
69	}
70
71	/**
72	* Determine whether the current user should be restricted to seeing only their own uploads.
73	*
74	* @return bool
75	*/
76	private function should_restrict_current_user() {
77	if ( !is_user_logged_in() ) {
78	return false;
79	}
80	// Administrators (and multisite super admins) can always see all media.
81	if ( current_user_can( 'manage_options' ) ) {
82	return false;
83	}
84	if ( is_multisite() && is_super_admin() ) {
85	return false;
86	}
87	// Only apply when the user can upload files (i.e., they are a relevant role for media).
88	if ( !current_user_can( 'upload_files' ) ) {
89	return false;
90	}
91	// Free behavior: restrict all non-admin upload-capable users.
92	$should_restrict = true;
93	return (bool) $should_restrict;
94	}
95
96	}
97