# ivyforms/1.5/backend/src/Services/Permissions/AccessRuleMatcher.php

The Innovative Form Builder – IvyForms, version 1.5. 112 lines.

- Page: https://pluginprobe.com/plugins/ivyforms/1.5/code/backend/src/Services/Permissions/AccessRuleMatcher.php
- Raw: https://pluginprobe.com/plugins/ivyforms/1.5/raw/backend/src/Services/Permissions/AccessRuleMatcher.php
- Modified: 2026-06-22T13:19:22+00:00

Line numbers below start at 1. Link to a line or a range by appending a fragment to the
page URL, for example `https://pluginprobe.com/plugins/ivyforms/1.5/code/backend/src/Services/Permissions/AccessRuleMatcher.php#L10-L20`.

```php
<?php

/**
 * @copyright © Melograno Venture Studio. All rights reserved.
 */

namespace IvyForms\Services\Permissions;

// phpcs:disable PSR1.Files.SideEffects
if (!defined('ABSPATH')) {
    exit;
}

/**
 * Form-scope and principal matching helpers for stored access rules.
 */
final class AccessRuleMatcher
{
    /**
     * @param mixed[] $rule
     */
    public static function appliesToForm(array $rule, ?int $formId): bool
    {
        $formIds = $rule['form_ids'] ?? null;
        if ($formIds === null) {
            return true;
        }
        if (!is_array($formIds)) {
            return false;
        }
        if ($formId === null) {
            return false;
        }

        return in_array($formId, array_map('intval', $formIds), true);
    }

    /**
     * @param mixed[] $rule
     */
    public static function matchesUser(array $rule, \WP_User $user): bool
    {
        $id = isset($rule['user_id']) ? (int) $rule['user_id'] : 0;

        return $id > 0 && $id === (int) $user->ID;
    }

    /**
     * @param mixed[] $rule
     */
    public static function matchesRole(array $rule, \WP_User $user): bool
    {
        $slug = isset($rule['role_slug']) ? strtolower(trim((string) $rule['role_slug'])) : '';
        if ($slug === '') {
            return false;
        }

        return in_array($slug, self::getUserRoleSlugs($user), true);
    }

    /**
     * @param list<array<string,mixed>> $rules
     * @return list<array<string,mixed>>
     */
    public static function sortForMerge(array $rules): array
    {
        usort(
            $rules,
            static function (array $leftRule, array $rightRule): int {
                $leftUpdatedAt  = isset($leftRule['updated_at']) ? (int) $leftRule['updated_at'] : 0;
                $rightUpdatedAt = isset($rightRule['updated_at']) ? (int) $rightRule['updated_at'] : 0;
                if ($leftUpdatedAt !== $rightUpdatedAt) {
                    return $leftUpdatedAt <=> $rightUpdatedAt;
                }
                $leftCreatedAt  = isset($leftRule['created_at']) ? (int) $leftRule['created_at'] : 0;
                $rightCreatedAt = isset($rightRule['created_at']) ? (int) $rightRule['created_at'] : 0;

                return $leftCreatedAt <=> $rightCreatedAt;
            }
        );

        return $rules;
    }

    /**
     * @return list<string>
     */
    private static function getUserRoleSlugs(\WP_User $user): array
    {
        $roleSet = [];

        foreach ((array) $user->roles as $role) {
            if (!is_string($role) || $role === '') {
                continue;
            }
            $roleSet[strtolower($role)] = true;
        }

        foreach ((array) $user->caps as $cap => $enabled) {
            if (!$enabled || !is_string($cap) || $cap === '') {
                continue;
            }
            if (!wp_roles()->is_role($cap)) {
                continue;
            }
            $roleSet[strtolower($cap)] = true;
        }

        return array_keys($roleSet);
    }
}

```