EditAccessMiddleware.php
2 weeks ago
FullAccessMiddleware.php
2 weeks ago
ViewAccessMiddleware.php
2 weeks ago
ViewOrPreviewMiddleware.php
2 weeks ago
ViewOrPreviewMiddleware.php
41 lines
| 1 | <?php |
| 2 | |
| 3 | namespace Kirki\App\Http\Middlewares; |
| 4 | |
| 5 | defined('ABSPATH') || exit; |
| 6 | |
| 7 | use Kirki\App\Constants\AccessLevels; |
| 8 | use Kirki\App\Supports\EditorPreview; |
| 9 | use Kirki\Framework\Contracts\Middleware; |
| 10 | use Kirki\Framework\Contracts\Request; |
| 11 | use Kirki\Framework\Exceptions\AuthorizationException; |
| 12 | use function Kirki\Framework\user; |
| 13 | |
| 14 | class ViewOrPreviewMiddleware implements Middleware |
| 15 | { |
| 16 | /** |
| 17 | * Handle the incoming request and determine if the user has view access. |
| 18 | * |
| 19 | * @param Request $request The incoming request instance. |
| 20 | * @param callable $next The next middleware or controller to execute. |
| 21 | * @return mixed The result of the next middleware or a response. |
| 22 | */ |
| 23 | public function handle(Request $request, callable $next) |
| 24 | { |
| 25 | if (EditorPreview::has_valid_token()) { |
| 26 | return $next($request); |
| 27 | } |
| 28 | |
| 29 | $has_access = user()->has_access([ |
| 30 | AccessLevels::FULL_ACCESS, |
| 31 | AccessLevels::CONTENT_ACCESS, |
| 32 | AccessLevels::VIEW_ACCESS, |
| 33 | ]); |
| 34 | |
| 35 | if (!$has_access) { |
| 36 | throw new AuthorizationException(__('You don\'t have the permission to access this request', 'kirki')); |
| 37 | } |
| 38 | |
| 39 | return $next($request); |
| 40 | } |
| 41 | } |