BalanceTransactionPermissionsController.php
3 years ago
ChargePermissionsController.php
3 years ago
CheckoutPermissionsController.php
3 years ago
CustomerPermissionsController.php
3 years ago
InvoicePermissionsController.php
3 years ago
LicensePermissionsController.php
3 years ago
MediaPermissionsController.php
3 years ago
ModelPermissionsController.php
3 years ago
OrderPermissionsController.php
3 years ago
PaymentMethodPermissionsController.php
3 years ago
PurchasePermissionsController.php
3 years ago
RefundPermissionsController.php
3 years ago
SubscriptionPermissionsController.php
3 years ago
CustomerPermissionsController.php
99 lines
| 1 | <?php |
| 2 | namespace SureCart\Permissions\Models; |
| 3 | |
| 4 | /** |
| 5 | * Handle permissions. |
| 6 | */ |
| 7 | class CustomerPermissionsController extends ModelPermissionsController { |
| 8 | /** |
| 9 | * Can user edit |
| 10 | * |
| 11 | * @param \SureCart\Models\User $user User model. |
| 12 | * @param array $args { |
| 13 | * Arguments that accompany the requested capability check. |
| 14 | * @type string $0 Requested capability. |
| 15 | * @type int $1 Concerned user ID. |
| 16 | * @type mixed ...$2 Optional second and further parameters, typically object ID. |
| 17 | * } |
| 18 | * @param bool[] $allcaps Array of key/value pairs where keys represent a capability name |
| 19 | * and boolean values represent whether the user has that capability. |
| 20 | * @return boolean Does user have permission. |
| 21 | */ |
| 22 | public function edit_sc_customer( $user, $args, $allcaps ) { |
| 23 | if ( ! empty( $allcaps['edit_sc_customers'] ) ) { |
| 24 | return true; |
| 25 | } |
| 26 | |
| 27 | // no data provided to update. Make sure to at least pass an empty array. |
| 28 | if ( is_null( $args[3] ?? null ) ) { |
| 29 | return false; |
| 30 | } |
| 31 | |
| 32 | $params = $args[3]; |
| 33 | |
| 34 | // request has blacklisted keys. |
| 35 | if ( ! $this->requestOnlyHasKeys( $params, [ 'billing_matches_shipping', 'email', 'name', 'first_name', 'last_name', 'phone', 'unsubscribed', 'billing_address', 'default_payment_method', 'shipping_address', 'tax_identifier' ] ) ) { |
| 36 | return false; |
| 37 | } |
| 38 | |
| 39 | return $this->customerIdMatches( $user, $args[2] ); |
| 40 | } |
| 41 | |
| 42 | /** |
| 43 | * Can user read |
| 44 | * |
| 45 | * @param \SureCart\Models\User $user User model. |
| 46 | * @param array $args { |
| 47 | * Arguments that accompany the requested capability check. |
| 48 | * @type string $0 Requested capability. |
| 49 | * @type int $1 Concerned user ID. |
| 50 | * @type mixed ...$2 Optional second and further parameters, typically object ID. |
| 51 | * } |
| 52 | * @param bool[] $allcaps Array of key/value pairs where keys represent a capability name |
| 53 | * and boolean values represent whether the user has that capability. |
| 54 | * @return boolean Does user have permission. |
| 55 | */ |
| 56 | public function read_sc_customer( $user, $args, $allcaps ) { |
| 57 | if ( ! empty( $allcaps['read_sc_customers'] ) ) { |
| 58 | return true; |
| 59 | } |
| 60 | if ( empty( $args[2]['id'] ) ) { |
| 61 | return false; |
| 62 | } |
| 63 | return $this->customerIdMatches( $user, $args[2]['id'] ); |
| 64 | } |
| 65 | |
| 66 | /** |
| 67 | * Can user list. |
| 68 | * |
| 69 | * @param \SureCart\Models\User $user User model. |
| 70 | * @param array $args { |
| 71 | * Arguments that accompany the requested capability check. |
| 72 | * @type string $0 Requested capability. |
| 73 | * @type int $1 Concerned user ID. |
| 74 | * @type string[] ...$2 The ids to list. |
| 75 | * } |
| 76 | * @param bool[] $allcaps Array of key/value pairs where keys represent a capability name |
| 77 | * and boolean values represent whether the user has that capability. |
| 78 | * |
| 79 | * @return boolean Does user have permission. |
| 80 | */ |
| 81 | public function read_sc_customers( $user, $args, $allcaps ) { |
| 82 | if ( ! empty( $allcaps['read_sc_customers'] ) ) { |
| 83 | return true; |
| 84 | } |
| 85 | return $this->isListingOwnCustomerIds( $user, $args[2]['ids'] ?? [] ); |
| 86 | } |
| 87 | |
| 88 | /** |
| 89 | * Does the customer id match the user id. |
| 90 | * |
| 91 | * @param \SureCart\Models\User $user User model. |
| 92 | * @param string $id Customer ID. |
| 93 | * @return boolean |
| 94 | */ |
| 95 | public function customerIdMatches( $user, $id ) { |
| 96 | return in_array( $id, (array) $user->customerIds(), true ); |
| 97 | } |
| 98 | } |
| 99 |