AJAX
3 years ago
Migrations
3 years ago
Models
3 years ago
Queries
3 years ago
Tables
3 years ago
Utils
3 years ago
Campaign_Builder.php
3 years ago
Capability_Manager.php
3 years ago
Chart.php
3 years ago
Chart_Geo.php
3 years ago
Chart_SVG.php
3 years ago
Current_Resource.php
3 years ago
Dashboard_Options.php
3 years ago
Dashboard_Widget.php
3 years ago
Email_Reports.php
3 years ago
Filters.php
3 years ago
Geo_Database.php
3 years ago
Geo_Database_Download_Job.php
3 years ago
Health_Check.php
3 years ago
Independent_Analytics.php
3 years ago
Known_Referrers.php
3 years ago
PDF.php
3 years ago
Query.php
3 years ago
Quick_Stats.php
3 years ago
REST_API.php
3 years ago
Real_Time.php
3 years ago
Settings.php
3 years ago
Track_Resource_Changes.php
3 years ago
View_Counter.php
3 years ago
WP_Option_Cache_Bust.php
3 years ago
Capability_Manager.php
112 lines
| 1 | <?php |
| 2 | |
| 3 | namespace IAWP; |
| 4 | |
| 5 | class Capability_Manager |
| 6 | { |
| 7 | /** |
| 8 | * @return array |
| 9 | */ |
| 10 | public static function all_capabilities(): array |
| 11 | { |
| 12 | return [ |
| 13 | 'iawp_read_only_access' => esc_html__('View analytics', 'iawp'), |
| 14 | 'iawp_full_access' => esc_html__('View analytics and edit settings', 'iawp'), |
| 15 | ]; |
| 16 | } |
| 17 | |
| 18 | public static function reset_capabilities(): void |
| 19 | { |
| 20 | $roles = wp_roles()->roles; |
| 21 | $edits = []; |
| 22 | |
| 23 | foreach ($roles as $role => $role_details) { |
| 24 | $edits[$role] = null; |
| 25 | } |
| 26 | |
| 27 | self::edit_all_capabilities($edits); |
| 28 | } |
| 29 | |
| 30 | /** |
| 31 | * Accepts an array of key value pairs where the key is the role and the value is the capability to use |
| 32 | * |
| 33 | * @param $capabilities |
| 34 | * @return void |
| 35 | */ |
| 36 | public static function edit_all_capabilities($capabilities): void |
| 37 | { |
| 38 | foreach ($capabilities as $role => $cap) { |
| 39 | $user_role = get_role($role); |
| 40 | |
| 41 | // For the role, remove all previous capabilities |
| 42 | foreach (self::all_capabilities() as $capability => $label) { |
| 43 | $user_role->remove_cap($capability); |
| 44 | } |
| 45 | |
| 46 | if (!empty($cap)) { |
| 47 | $user_role->add_cap($cap); |
| 48 | } |
| 49 | } |
| 50 | } |
| 51 | |
| 52 | /** |
| 53 | * @return bool |
| 54 | */ |
| 55 | public static function can_view(): bool |
| 56 | { |
| 57 | return self::is_admin() || current_user_can('iawp_read_only_access') || current_user_can('iawp_full_access'); |
| 58 | } |
| 59 | |
| 60 | /** |
| 61 | * @return bool |
| 62 | */ |
| 63 | public static function can_edit(): bool |
| 64 | { |
| 65 | return self::is_admin() || current_user_can('iawp_full_access'); |
| 66 | } |
| 67 | |
| 68 | /** |
| 69 | * Returns a capability string for admin menu pages. Admins can always see pages. Other roles |
| 70 | * can only see pages if they have the special capability applied. |
| 71 | * |
| 72 | * @return string |
| 73 | */ |
| 74 | public static function can_view_string(): string |
| 75 | { |
| 76 | if (self::is_admin()) { |
| 77 | return 'manage_options'; |
| 78 | } |
| 79 | if (self::can_edit()) { |
| 80 | return 'iawp_full_access'; |
| 81 | } |
| 82 | if (self::can_view()) { |
| 83 | return 'iawp_read_only_access'; |
| 84 | } |
| 85 | |
| 86 | return 'manage_options'; |
| 87 | } |
| 88 | |
| 89 | /** |
| 90 | * @return bool |
| 91 | */ |
| 92 | public static function is_admin(): bool |
| 93 | { |
| 94 | foreach (wp_get_current_user()->roles as $role) { |
| 95 | if ($role === 'administrator') { |
| 96 | return true; |
| 97 | } |
| 98 | } |
| 99 | |
| 100 | return false; |
| 101 | } |
| 102 | |
| 103 | public static function white_labeled(): bool |
| 104 | { |
| 105 | if (self::is_admin()) { |
| 106 | return false; |
| 107 | } |
| 108 | |
| 109 | return iawp()->get_option('iawp_white_label', false); |
| 110 | } |
| 111 | } |
| 112 |