Models
2 years ago
WPConfig
4 years ago
AdminAccessService.php
3 years ago
PermissionsService.php
4 years ago
RolesService.php
2 years ago
RolesServiceProvider.php
3 years ago
RolesService.php
241 lines
| 1 | <?php |
| 2 | namespace SureCart\Permissions; |
| 3 | |
| 4 | /** |
| 5 | * Adds roles and capabilities. |
| 6 | */ |
| 7 | class RolesService { |
| 8 | /** |
| 9 | * Create roles and caps. |
| 10 | * |
| 11 | * @return void |
| 12 | */ |
| 13 | public function create() { |
| 14 | $this->addRoles(); |
| 15 | $this->addCaps(); |
| 16 | } |
| 17 | |
| 18 | /** |
| 19 | * Create roles and caps. |
| 20 | * |
| 21 | * @return void |
| 22 | */ |
| 23 | public function delete() { |
| 24 | $this->removeRoles(); |
| 25 | // $this->removeCaps(); |
| 26 | } |
| 27 | |
| 28 | /** |
| 29 | * Add Roles. |
| 30 | * |
| 31 | * @return void |
| 32 | */ |
| 33 | public function addRoles() { |
| 34 | add_role( |
| 35 | 'sc_shop_manager', |
| 36 | __( 'SureCart Shop Manager', 'surecart' ), |
| 37 | [ |
| 38 | 'read' => true, |
| 39 | 'edit_posts' => true, |
| 40 | 'delete_posts' => true, |
| 41 | 'unfiltered_html' => true, |
| 42 | 'upload_files' => true, |
| 43 | 'export' => true, |
| 44 | 'import' => true, |
| 45 | 'delete_others_pages' => true, |
| 46 | 'delete_others_posts' => true, |
| 47 | 'delete_pages' => true, |
| 48 | 'delete_private_pages' => true, |
| 49 | 'delete_private_posts' => true, |
| 50 | 'delete_published_pages' => true, |
| 51 | 'delete_published_posts' => true, |
| 52 | 'edit_others_pages' => true, |
| 53 | 'edit_others_posts' => true, |
| 54 | 'edit_pages' => true, |
| 55 | 'edit_private_pages' => true, |
| 56 | 'edit_private_posts' => true, |
| 57 | 'edit_published_pages' => true, |
| 58 | 'edit_published_posts' => true, |
| 59 | 'manage_categories' => true, |
| 60 | 'manage_links' => true, |
| 61 | 'moderate_comments' => true, |
| 62 | 'publish_pages' => true, |
| 63 | 'publish_posts' => true, |
| 64 | 'read_private_pages' => true, |
| 65 | 'read_private_posts' => true, |
| 66 | ] |
| 67 | ); |
| 68 | |
| 69 | add_role( |
| 70 | 'sc_shop_accountant', |
| 71 | __( 'SureCart Accountant', 'surecart' ), |
| 72 | [ |
| 73 | 'read' => true, |
| 74 | 'edit_posts' => false, |
| 75 | 'delete_posts' => false, |
| 76 | ] |
| 77 | ); |
| 78 | |
| 79 | add_role( |
| 80 | 'sc_shop_worker', |
| 81 | __( 'SureCart Shop Worker', 'surecart' ), |
| 82 | [ |
| 83 | 'read' => true, |
| 84 | 'edit_posts' => false, |
| 85 | 'upload_files' => true, |
| 86 | 'delete_posts' => false, |
| 87 | ] |
| 88 | ); |
| 89 | |
| 90 | add_role( |
| 91 | 'sc_customer', |
| 92 | __( 'SureCart Customer', 'surecart' ), |
| 93 | [ |
| 94 | 'read' => true, |
| 95 | ] |
| 96 | ); |
| 97 | } |
| 98 | |
| 99 | /** |
| 100 | * Add new shop-specific capabilities |
| 101 | * |
| 102 | * @since 1.4.4 |
| 103 | * @global WP_Roles $wp_roles |
| 104 | * @return void |
| 105 | */ |
| 106 | public function addCaps() { |
| 107 | global $wp_roles; |
| 108 | |
| 109 | if ( class_exists( 'WP_Roles' ) ) { |
| 110 | if ( ! isset( $wp_roles ) ) { |
| 111 | // phpcs:ignore |
| 112 | $wp_roles = new \WP_Roles(); |
| 113 | } |
| 114 | } |
| 115 | |
| 116 | if ( is_object( $wp_roles ) ) { |
| 117 | $wp_roles->add_cap( 'sc_shop_manager', 'view_sc_shop_reports' ); |
| 118 | $wp_roles->add_cap( 'sc_shop_manager', 'view_sc_shop_sensitive_data' ); |
| 119 | $wp_roles->add_cap( 'sc_shop_manager', 'export_sc_shop_reports' ); |
| 120 | $wp_roles->add_cap( 'sc_shop_manager', 'manage_sc_shop_settings' ); |
| 121 | $wp_roles->add_cap( 'sc_shop_manager', 'list_users' ); |
| 122 | $wp_roles->add_cap( 'sc_shop_manager', 'edit_user' ); |
| 123 | |
| 124 | $wp_roles->add_cap( 'administrator', 'view_sc_shop_reports' ); |
| 125 | $wp_roles->add_cap( 'administrator', 'view_sc_shop_sensitive_data' ); |
| 126 | $wp_roles->add_cap( 'administrator', 'export_sc_shop_reports' ); |
| 127 | $wp_roles->add_cap( 'administrator', 'manage_sc_shop_settings' ); |
| 128 | $wp_roles->add_cap( 'administrator', 'manage_sc_account_settings' ); |
| 129 | |
| 130 | // Add the main model capabilities. |
| 131 | $capabilities = $this->getModelCaps(); |
| 132 | foreach ( $capabilities as $cap_group ) { |
| 133 | foreach ( $cap_group as $cap ) { |
| 134 | $wp_roles->add_cap( 'administrator', $cap ); |
| 135 | $wp_roles->add_cap( 'sc_shop_manager', $cap ); |
| 136 | $wp_roles->add_cap( 'sc_shop_worker', $cap ); |
| 137 | } |
| 138 | } |
| 139 | |
| 140 | $wp_roles->add_cap( 'sc_shop_accountant', 'edit_sc_products' ); |
| 141 | $wp_roles->add_cap( 'sc_shop_accountant', 'view_sc_shop_reports' ); |
| 142 | $wp_roles->add_cap( 'sc_shop_accountant', 'export_sc_shop_reports' ); |
| 143 | $wp_roles->add_cap( 'sc_shop_accountant', 'edit_sc_shop_charges' ); |
| 144 | } |
| 145 | } |
| 146 | |
| 147 | /** |
| 148 | * Gets the core post type capabilities |
| 149 | * |
| 150 | * @since 1.4.4 |
| 151 | * @return array $capabilities Core post type capabilities |
| 152 | */ |
| 153 | public function getModelCaps() { |
| 154 | $capabilities = []; |
| 155 | |
| 156 | $capability_types = [ |
| 157 | 'sc_coupon', |
| 158 | 'sc_promotion', |
| 159 | 'sc_balance_transaction', |
| 160 | 'sc_checkout', |
| 161 | 'sc_purchase', |
| 162 | 'sc_webhook', |
| 163 | 'sc_product', |
| 164 | 'sc_license', |
| 165 | 'sc_customer', |
| 166 | 'sc_order', |
| 167 | 'sc_invoice', |
| 168 | 'sc_price', |
| 169 | 'sc_refund', |
| 170 | 'sc_charge', |
| 171 | 'sc_media', |
| 172 | 'sc_payment_method', |
| 173 | 'sc_subscription', |
| 174 | ]; |
| 175 | |
| 176 | foreach ( $capability_types as $capability_type ) { |
| 177 | $capabilities[ $capability_type ] = array( |
| 178 | // Models. |
| 179 | "read_{$capability_type}", // read. |
| 180 | "read_{$capability_type}s", // read. |
| 181 | "delete_{$capability_type}", // delete. |
| 182 | "edit_{$capability_type}", // edit. |
| 183 | "edit_{$capability_type}s", // edit all. |
| 184 | "edit_others_{$capability_type}s", // edit others. |
| 185 | "publish_{$capability_type}s", // publish. |
| 186 | "delete_{$capability_type}s", // delete. |
| 187 | "delete_others_{$capability_type}s", // delete others. |
| 188 | |
| 189 | // Stats. |
| 190 | "view_{$capability_type}_stats", |
| 191 | ); |
| 192 | } |
| 193 | |
| 194 | return $capabilities; |
| 195 | } |
| 196 | |
| 197 | /** |
| 198 | * Remove Roles. |
| 199 | * |
| 200 | * @return void |
| 201 | */ |
| 202 | public function removeRoles() { |
| 203 | remove_role( 'sc_shop_manager' ); |
| 204 | remove_role( 'sc_shop_accountant' ); |
| 205 | remove_role( 'sc_shop_worker' ); |
| 206 | } |
| 207 | |
| 208 | /** |
| 209 | * Remove Caps. |
| 210 | * |
| 211 | * @return void |
| 212 | */ |
| 213 | public function removeCaps() { |
| 214 | global $wp_roles; |
| 215 | |
| 216 | if ( class_exists( 'WP_Roles' ) ) { |
| 217 | if ( ! isset( $wp_roles ) ) { |
| 218 | // phpcs:ignore |
| 219 | $wp_roles = new \WP_Roles(); |
| 220 | } |
| 221 | } |
| 222 | |
| 223 | $delete_caps = array_merge( |
| 224 | [ |
| 225 | 'view_sc_shop_reports', |
| 226 | 'view_sc_shop_sensitive_data', |
| 227 | 'export_sc_shop_reports', |
| 228 | 'manage_sc_shop_settings', |
| 229 | 'manage_sc_account_settings', |
| 230 | ], |
| 231 | $this->getModelCaps() |
| 232 | ); |
| 233 | |
| 234 | foreach ( $delete_caps as $cap ) { |
| 235 | foreach ( array_keys( $wp_roles->roles ) as $role ) { |
| 236 | $wp_roles->remove_cap( $role, $cap ); |
| 237 | } |
| 238 | } |
| 239 | } |
| 240 | } |
| 241 |