class-give-roles.php — GiveWP – Donation Plugin and Fundraising Platform 3.19.4

give / includes / class-give-roles.php

give / includes Last commit date

class-give-roles.php

371 lines

1	<?php
2	/**
3	* Roles and Capabilities
4	*
5	* @package Give
6	* @subpackage Classes/Give_Roles
7	* @copyright Copyright (c) 2016, GiveWP
8	* @license https://opensource.org/licenses/gpl-license GNU Public License
9	* @since 1.0
10	*/
11
12	// Exit if accessed directly.
13	if ( ! defined( 'ABSPATH' ) ) {
14	exit;
15	}
16
17	/**
18	* Give_Roles Class
19	*
20	* This class handles the role creation and assignment of capabilities for those roles.
21	*
22	* These roles let us have Give Accountants, Give Workers, etc, each of whom can do
23	* certain things within the plugin.
24	*
25	* @since 1.0
26	*/
27	class Give_Roles {
28
29	/**
30	* Class Constructor
31	*
32	* Set up the Give Roles Class.
33	*
34	* @since 1.0
35	* @access public
36	*/
37	public function __construct() {
38	add_filter( 'give_map_meta_cap', array( $this, 'meta_caps' ), 10, 4 );
39	add_filter( 'woocommerce_disable_admin_bar', array( $this, 'manage_admin_dashboard' ), 10, 1 );
40	add_filter( 'woocommerce_prevent_admin_access', array( $this, 'manage_admin_dashboard' ), 10 );
41	}
42
43	/**
44	* Add Roles
45	*
46	* Add new shop roles with default WordPress capabilities.
47	*
48	* @since 1.0
49	* @access public
50	*
51	* @return void
52	*/
53	public function add_roles() {
54	add_role(
55	'give_manager',
56	__( 'GiveWP Manager', 'give' ),
57	array(
58	'read' => true,
59	'edit_posts' => true,
60	'delete_posts' => true,
61	'unfiltered_html' => true,
62	'upload_files' => true,
63	'export' => false,
64	'import' => false,
65	'delete_others_pages' => false,
66	'delete_others_posts' => false,
67	'delete_pages' => true,
68	'delete_private_pages' => true,
69	'delete_private_posts' => true,
70	'delete_published_pages' => true,
71	'delete_published_posts' => true,
72	'edit_others_pages' => false,
73	'edit_others_posts' => false,
74	'edit_pages' => true,
75	'edit_private_pages' => true,
76	'edit_private_posts' => true,
77	'edit_published_pages' => true,
78	'edit_published_posts' => true,
79	'manage_categories' => false,
80	'manage_links' => true,
81	'moderate_comments' => true,
82	'publish_pages' => true,
83	'publish_posts' => true,
84	'read_private_pages' => true,
85	'read_private_posts' => true,
86	)
87	);
88
89	add_role(
90	'give_accountant',
91	__( 'GiveWP Accountant', 'give' ),
92	array(
93	'read' => true,
94	'edit_posts' => false,
95	'delete_posts' => false,
96	)
97	);
98
99	add_role(
100	'give_worker',
101	__( 'GiveWP Worker', 'give' ),
102	array(
103	'read' => true,
104	'edit_posts' => true,
105	'edit_pages' => true,
106	'upload_files' => true,
107	'delete_posts' => false,
108	)
109	);
110
111	add_role(
112	'give_donor',
113	__( 'GiveWP Donor', 'give' ),
114	array(
115	'read' => true,
116	)
117	);
118
119	}
120
121	/**
122	* Add Capabilities
123	*
124	* Add new shop-specific capabilities.
125	*
126	* @since 1.0
127	* @access public
128	*
129	* @global WP_Roles $wp_roles
130	*
131	* @return void
132	*/
133	public function add_caps() {
134	global $wp_roles;
135
136	if ( class_exists( 'WP_Roles' ) ) {
137	if ( ! isset( $wp_roles ) ) {
138	$wp_roles = new WP_Roles();
139	}
140	}
141
142	if ( is_object( $wp_roles ) ) {
143	$wp_roles->add_cap( 'give_manager', 'view_give_reports' );
144	$wp_roles->add_cap( 'give_manager', 'view_give_sensitive_data' );
145	$wp_roles->add_cap( 'give_manager', 'export_give_reports' );
146	$wp_roles->add_cap( 'give_manager', 'manage_give_settings' );
147	$wp_roles->add_cap( 'give_manager', 'view_give_payments' );
148
149	$wp_roles->add_cap( 'administrator', 'view_give_reports' );
150	$wp_roles->add_cap( 'administrator', 'view_give_sensitive_data' );
151	$wp_roles->add_cap( 'administrator', 'export_give_reports' );
152	$wp_roles->add_cap( 'administrator', 'manage_give_settings' );
153	$wp_roles->add_cap( 'administrator', 'view_give_payments' );
154
155	// Add the main post type capabilities.
156	$capabilities = $this->get_core_caps();
157	foreach ( $capabilities as $cap_group ) {
158	foreach ( $cap_group as $cap ) {
159	$wp_roles->add_cap( 'administrator', $cap );
160	$wp_roles->add_cap( 'give_manager', $cap );
161	}
162	}
163
164	// Add Capabilities to Give Workers User Role.
165	$wp_roles->add_cap( 'give_worker', 'edit_give_payments' );
166	$wp_roles->add_cap( 'give_worker', 'delete_give_forms' );
167	$wp_roles->add_cap( 'give_worker', 'delete_others_give_forms' );
168	$wp_roles->add_cap( 'give_worker', 'delete_private_give_forms' );
169	$wp_roles->add_cap( 'give_worker', 'delete_published_give_forms' );
170	$wp_roles->add_cap( 'give_worker', 'edit_give_forms' );
171	$wp_roles->add_cap( 'give_worker', 'edit_others_give_forms' );
172	$wp_roles->add_cap( 'give_worker', 'edit_private_give_forms' );
173	$wp_roles->add_cap( 'give_worker', 'edit_published_give_forms' );
174	$wp_roles->add_cap( 'give_worker', 'publish_give_forms' );
175	$wp_roles->add_cap( 'give_worker', 'read_private_give_forms' );
176
177	// Add Capabilities to Give Accountant User Role.
178	$wp_roles->add_cap( 'give_accountant', 'edit_give_forms' );
179	$wp_roles->add_cap( 'give_accountant', 'read_private_give_forms' );
180	$wp_roles->add_cap( 'give_accountant', 'view_give_reports' );
181	$wp_roles->add_cap( 'give_accountant', 'export_give_reports' );
182	$wp_roles->add_cap( 'give_accountant', 'edit_give_payments' );
183	$wp_roles->add_cap( 'give_accountant', 'view_give_payments' );
184
185	}
186	}
187
188	/**
189	* Get Core Capabilities
190	*
191	* Retrieve core post type capabilities.
192	*
193	* @since 1.0
194	* @access public
195	*
196	* @return array $capabilities Core post type capabilities.
197	*/
198	public function get_core_caps() {
199	$capabilities = array();
200
201	$capability_types = array( 'give_form', 'give_payment' );
202
203	foreach ( $capability_types as $capability_type ) {
204	$capabilities[ $capability_type ] = array(
205	// Post type.
206	"edit_{$capability_type}s",
207	"edit_others_{$capability_type}s",
208	"publish_{$capability_type}s",
209	"read_private_{$capability_type}s",
210	"delete_{$capability_type}s",
211	"delete_private_{$capability_type}s",
212	"delete_published_{$capability_type}s",
213	"delete_others_{$capability_type}s",
214	"edit_private_{$capability_type}s",
215	"edit_published_{$capability_type}s",
216
217	// Terms / taxonomies.
218	"manage_{$capability_type}_terms",
219	"edit_{$capability_type}_terms",
220	"delete_{$capability_type}_terms",
221	"assign_{$capability_type}_terms",
222
223	// Custom capabilities.
224	"view_{$capability_type}_stats",
225	"import_{$capability_type}s",
226	);
227	}
228
229	return $capabilities;
230	}
231
232	/**
233	* Meta Capabilities
234	*
235	* Map meta capabilities to primitive capabilities.
236	*
237	* @since 1.0
238	* @access public
239	*
240	* @param array $caps Returns the user's actual capabilities.
241	* @param string $cap Capability name.
242	* @param int $user_id The user ID.
243	* @param array $args Adds the context to the cap. Typically the object ID.
244	*
245	* @return array $caps Meta capabilities.
246	*/
247	public function meta_caps( $caps, $cap, $user_id, $args ) {
248
249	switch ( $cap ) {
250
251	case 'view_give_form_stats':
252	if ( empty( $args[0] ) ) {
253	break;
254	}
255
256	$form = get_post( $args[0] );
257	if ( empty( $form ) ) {
258	break;
259	}
260
261	if ( user_can( $user_id, 'view_give_reports' ) \|\| $user_id == $form->post_author ) {
262	$caps = array();
263	}
264
265	break;
266	}
267
268	return $caps;
269
270	}
271
272	/**
273	* Remove Capabilities
274	*
275	* Remove core post type capabilities (called on uninstall).
276	*
277	* @since 1.0
278	* @access public
279	*
280	* @global WP_Roles $wp_roles
281	*
282	* @return void
283	*/
284	public function remove_caps() {
285
286	global $wp_roles;
287
288	if ( class_exists( 'WP_Roles' ) ) {
289	if ( ! isset( $wp_roles ) ) {
290	$wp_roles = new WP_Roles();
291	}
292	}
293
294	if ( is_object( $wp_roles ) ) {
295	// Give Manager Capabilities.
296	$wp_roles->remove_cap( 'give_manager', 'view_give_reports' );
297	$wp_roles->remove_cap( 'give_manager', 'view_give_sensitive_data' );
298	$wp_roles->remove_cap( 'give_manager', 'export_give_reports' );
299	$wp_roles->remove_cap( 'give_manager', 'manage_give_settings' );
300
301	// Site Administrator Capabilities.
302	$wp_roles->remove_cap( 'administrator', 'view_give_reports' );
303	$wp_roles->remove_cap( 'administrator', 'view_give_sensitive_data' );
304	$wp_roles->remove_cap( 'administrator', 'export_give_reports' );
305	$wp_roles->remove_cap( 'administrator', 'manage_give_settings' );
306	$wp_roles->remove_cap( 'administrator', 'view_give_payments' );
307
308	// Remove the Main Post Type Capabilities.
309	$capabilities = $this->get_core_caps();
310
311	foreach ( $capabilities as $cap_group ) {
312	foreach ( $cap_group as $cap ) {
313	$wp_roles->remove_cap( 'give_manager', $cap );
314	$wp_roles->remove_cap( 'administrator', $cap );
315
316	}
317	}
318
319	// Remove capabilities from the Give Worker role.
320	$wp_roles->remove_cap( 'give_worker', 'edit_give_payments' );
321	$wp_roles->remove_cap( 'give_worker', 'delete_give_forms' );
322	$wp_roles->remove_cap( 'give_worker', 'delete_others_give_forms' );
323	$wp_roles->remove_cap( 'give_worker', 'delete_private_give_forms' );
324	$wp_roles->remove_cap( 'give_worker', 'delete_published_give_forms' );
325	$wp_roles->remove_cap( 'give_worker', 'edit_give_forms' );
326	$wp_roles->remove_cap( 'give_worker', 'edit_others_give_forms' );
327	$wp_roles->remove_cap( 'give_worker', 'edit_private_give_forms' );
328	$wp_roles->remove_cap( 'give_worker', 'edit_published_give_forms' );
329	$wp_roles->remove_cap( 'give_worker', 'publish_give_forms' );
330	$wp_roles->remove_cap( 'give_worker', 'read_private_give_forms' );
331
332	// Remove Capabilities from Give Accountant User Role.
333	$wp_roles->remove_cap( 'give_accountant', 'edit_give_forms' );
334	$wp_roles->remove_cap( 'give_accountant', 'read_private_give_forms' );
335	$wp_roles->remove_cap( 'give_accountant', 'view_give_reports' );
336	$wp_roles->remove_cap( 'give_accountant', 'export_give_reports' );
337	$wp_roles->remove_cap( 'give_accountant', 'edit_give_payments' );
338	$wp_roles->remove_cap( 'give_accountant', 'view_give_payments' );
339
340	}
341	}
342
343	/**
344	* Allow admin dashboard to User with Give Accountant Role.
345	*
346	* Note: WooCommerce doesn't allow the user to access the WP dashboard who holds "Give Accountant" role.
347	*
348	* @since 1.8.14
349	* @updated 1.8.18 - Fixed Give conflicting by not returning $show_admin_bar https://github.com/impress-org/give/issues/2539
350	*
351	* @param bool
352	*
353	* @return bool
354	*/
355	public function manage_admin_dashboard( $show_admin_bar ) {
356
357	// Get the current logged user.
358	$current_user = wp_get_current_user();
359
360	// If user with "Give Accountant" user role is logged-in .
361	if ( 0 !== $current_user->ID && in_array( 'give_accountant', (array) $current_user->roles, true ) ) {
362
363	// Return false, means no prevention.
364	return false;
365	}
366
367	return $show_admin_bar;
368
369	}
370	}
371