← All changes | src/Access/AccessHandler.php +137 -25 2.3.15 → 2.2.13 View file →

		@@ -1,5 +1,18 @@
1	1	<?php
	2	+/**
	3	+ * AccessHandler.php
	4	+ *
	5	+ * The AccessHandler class file.
	6	+ *
	7	+ * PHP versions 5
	8	+ *
	9	+ * @author Alexander Schneider <alexanderschneider85@gmail.com>
	10	+ * @copyright 2008-2017 Alexander Schneider
	11	+ * @license http://www.gnu.org/licenses/gpl-2.0.html GNU General Public License, version 2
	12	+ * @version SVN: $id$
	13	+ * @link http://wordpress.org/extend/plugins/user-access-manager/
	14	+ */
2	15
3	16	declare(strict_types=1);
4	17
5	18	namespace UserAccessManager\Access;
		@@ -9,48 +22,118 @@
9	22	use UserAccessManager\Database\Database;
10	23	use UserAccessManager\Object\ObjectHandler;
11	24	use UserAccessManager\User\UserHandler;
12	25	use UserAccessManager\UserGroup\AbstractUserGroup;
	26	+use UserAccessManager\UserGroup\DynamicUserGroup;
13	27	use UserAccessManager\UserGroup\UserGroupHandler;
14	28	use UserAccessManager\UserGroup\UserGroupTypeException;
15	29	use UserAccessManager\Wrapper\Wordpress;
16	30
	31	+/**
	32	+ * Class AccessHandler
	33	+ * @package UserAccessManager\AccessHandler
	34	+ */
17	35	class AccessHandler
18	36	{
19		- private ?array $excludedTerms = null;
20		- private ?array $excludedPosts = null;
21		- private array $objectAccess = [];
22		- private ?array $noneHiddenPostTypes = null;
	37	+ /**
	38	+ * @var Wordpress
	39	+ */
	40	+ private $wordpress;
23	41
	42	+ /**
	43	+ * @var MainConfig
	44	+ */
	45	+ private $mainConfig;
	46	+
	47	+ /**
	48	+ * @var Database
	49	+ */
	50	+ private $database;
	51	+
	52	+ /**
	53	+ * @var ObjectHandler
	54	+ */
	55	+ private $objectHandler;
	56	+
	57	+ /**
	58	+ * @var UserHandler
	59	+ */
	60	+ private $userHandler;
	61	+
	62	+ /**
	63	+ * @var UserGroupHandler
	64	+ */
	65	+ private $userGroupHandler;
	66	+
	67	+ /**
	68	+ * @var null|array
	69	+ */
	70	+ private $excludedTerms = null;
	71	+
	72	+ /**
	73	+ * @var null|array
	74	+ */
	75	+ private $excludedPosts = null;
	76	+
	77	+ /**
	78	+ * @var array
	79	+ */
	80	+ private $objectAccess = [];
	81	+
	82	+ /**
	83	+ * @var null|array
	84	+ */
	85	+ private $noneHiddenPostTypes = null;
	86	+
	87	+ /**
	88	+ * AccessHandler constructor.
	89	+ * @param Wordpress $wordpress
	90	+ * @param MainConfig $mainConfig
	91	+ * @param Database $database
	92	+ * @param ObjectHandler $objectHandler
	93	+ * @param UserHandler $userHandler
	94	+ * @param UserGroupHandler $userGroupHandler
	95	+ */
24	96	public function __construct(
25		- private Wordpress $wordpress,
26		- private MainConfig $mainConfig,
27		- private Database $database,
28		- private ObjectHandler $objectHandler,
29		- private UserHandler $userHandler,
30		- private UserGroupHandler $userGroupHandler
	97	+ Wordpress $wordpress,
	98	+ MainConfig $mainConfig,
	99	+ Database $database,
	100	+ ObjectHandler $objectHandler,
	101	+ UserHandler $userHandler,
	102	+ UserGroupHandler $userGroupHandler
31	103	) {
	104	+ $this->wordpress = $wordpress;
	105	+ $this->mainConfig = $mainConfig;
	106	+ $this->database = $database;
	107	+ $this->objectHandler = $objectHandler;
	108	+ $this->userHandler = $userHandler;
	109	+ $this->userGroupHandler = $userGroupHandler;
32	110	}
33	111
34		- private function hasAuthorAccess(string $objectType, int|string|null $objectId): bool
	112	+ /**
	113	+ * Checks it the user has access because he is the author.
	114	+ * @param string $objectType
	115	+ * @param int|string $objectId
	116	+ * @return bool
	117	+ */
	118	+ private function hasAuthorAccess(string $objectType, $objectId): bool
35	119	{
36	120	if ($this->mainConfig->authorsHasAccessToOwn() === true
37	121	&& $this->objectHandler->isPostType($objectType)
38	122	) {
39	123	$post = $this->objectHandler->getPost($objectId);
40		-
41		- if ($post === false) {
42		- return false;
43		- }
44		-
45		- $currentUserId = $this->wordpress->getCurrentUser()->ID;
46		- return $currentUserId !== 0
47		- && $currentUserId === (int) $post->post_author;
	124	+ return $post !== false
	125	+ && $this->wordpress->getCurrentUser()->ID === (int) $post->post_author;
48	126	}
49	127
50	128	return false;
51	129	}
52	130
	131	+ /**
	132	+ * Checks if the is admin value is set if not grabs it from the wordpress function.
	133	+ * @param null|bool $isAdmin
	134	+ * @return bool
	135	+ */
53	136	private function isAdmin(?bool $isAdmin): bool
54	137	{
55	138	return ($isAdmin === null) ? $this->wordpress->isAdmin() : $isAdmin;
56	139	}
		@@ -55,11 +138,14 @@
55	138	return ($isAdmin === null) ? $this->wordpress->isAdmin() : $isAdmin;
56	139	}
57	140
58	141	/**
	142	+ * Returns the user user groups filtered by the write access.
	143	+ * @param null|bool $isAdmin If set we force the admin mode.
	144	+ * @return AbstractUserGroup[]
59	145	* @throws UserGroupTypeException
60	146	*/
61		- private function getUserUserGroupsForObjectAccess(?bool $isAdmin = null): array
	147	+ private function getUserUserGroupsForObjectAccess($isAdmin = null): array
62	148	{
63	149	$userUserGroups = $this->userGroupHandler->getUserGroupsForUser();
64	150
65	151	if ($this->isAdmin($isAdmin) === true) {
		@@ -74,12 +160,17 @@
74	160	return $this->wordpress->applyFilters('uam_get_user_user_groups_for_object_access', $userUserGroups, $isAdmin);
75	161	}
76	162
77	163	/**
	164	+ * Checks if the current_user has access to the given post.
	165	+ * @param string|null $objectType The object type which should be checked.
	166	+ * @param int|string $objectId The id of the object.
	167	+ * @param null|bool $isAdmin If set we force the admin mode.
	168	+ * @return bool
78	169	* @throws UserGroupTypeException
79	170	* @throws Exception
80	171	*/
81		- public function checkObjectAccess(?string $objectType, int|string|null $objectId, ?bool $isAdmin = null): bool
	172	+ public function checkObjectAccess(?string $objectType, $objectId, $isAdmin = null): bool
82	173	{
83	174	$isAdmin = $this->isAdmin($isAdmin);
84	175
85	176	if (isset($this->objectAccess[$isAdmin][$objectType][$objectId]) === false) {
		@@ -88,14 +179,23 @@
88	179	|| $this->hasAuthorAccess($objectType, $objectId) === true
89	180	) {
90	181	$access = true;
91	182	} else {
	183	+ $access = true;
92	184	$membership = $this->userGroupHandler->getUserGroupsForObject($objectType, $objectId);
93		- $access = $membership === []
94		- || array_intersect_key($membership, $this->getUserUserGroupsForObjectAccess($isAdmin)) !== [];
95	185
96		- if ($access && $this->wordpress->isUserLoggedIn() && $this->wordpress->isMultiSite()) {
97		- $access = $this->wordpress->isUserMemberOfBlog();
	186	+ if (count($membership) > 0) {
	187	+ $userGroupDiff = array_intersect_key(
	188	+ $membership,
	189	+ $this->getUserUserGroupsForObjectAccess($isAdmin)
	190	+ );
	191	+ $nonLoggedInGroupKey = DynamicUserGroup::USER_TYPE . '|'
	192	+ . DynamicUserGroup::NOT_LOGGED_IN_USER_ID;
	193	+
	194	+ $access = count($userGroupDiff) > 0 && (
	195	+ isset($userGroupDiff[$nonLoggedInGroupKey]) ||
	196	+ $this->wordpress->isUserMemberOfBlog()
	197	+ );
98	198	}
99	199	}
100	200
101	201	$this->objectAccess[$isAdmin][$objectType][$objectId] = $access;
		@@ -104,8 +204,12 @@
104	204	return $this->objectAccess[$isAdmin][$objectType][$objectId];
105	205	}
106	206
107	207	/**
	208	+ * Returns the excluded objects.
	209	+ * @param string $type
	210	+ * @param array $filterTypesMap
	211	+ * @return array
108	212	* @throws UserGroupTypeException
109	213	* @throws Exception
110	214	*/
111	215	private function getExcludedObjects(string $type, array $filterTypesMap = []): array
		@@ -136,8 +240,10 @@
136	240	return array_combine($objectIds, $objectIds);
137	241	}
138	242
139	243	/**
	244	+ * Returns the excluded terms for a user.
	245	+ * @return array
140	246	* @throws UserGroupTypeException
141	247	*/
142	248	public function getExcludedTerms(): ?array
143	249	{
		@@ -151,8 +257,12 @@
151	257
152	258	return $this->excludedTerms;
153	259	}
154	260
	261	+ /**
	262	+ * Returns the none hidden post types map.
	263	+ * @return array
	264	+ */
155	265	private function getNoneHiddenPostTypes(): ?array
156	266	{
157	267	if ($this->noneHiddenPostTypes === null) {
158	268	$this->noneHiddenPostTypes = [];
		@@ -171,8 +281,10 @@
171	281	return $this->noneHiddenPostTypes;
172	282	}
173	283
174	284	/**
	285	+ * Returns the excluded posts.
	286	+ * @return array
175	287	* @throws UserGroupTypeException
176	288	*/
177	289	public function getExcludedPosts(): ?array
178	290	{