/**
* Get maximum protection type determined by the user's roles.
*
* @param WP_User $user
* @return string
*/
public static function getUserRolesMaxProtectionType($user)
{
$types = array();
if (!empty($user->roles) and is_array($user->roles)) {
foreach ($user->roles as $role) {
$types[] = RublonRolesProtection::getRoleProtectionType($role);
}
}
return RublonRolesProtection::getMaximumProtectionType($types);
}
/**
* Render "Email-based identity confirmation" settings.
*
* Callback for rendering the "Email-based identity confirmation"
* section settings on the plugin's page.
*
* @return void
*/
function rublon2factor_render_protection_types()
{
echo '<p class="rublon-settings-desc">' . __('Every user is protected via email by default. You can turn this off for selected roles. For more security, you can also require selected roles to use the Rublon mobile app.', 'rublon') . '</p>';
echo '<p class="rublon-settings-desc"><strong>' . __('Notice:', 'rublon') . ' </strong>' . __('Users of the Rublon mobile app are always protected, regardless of this setting. Users with no minimum protection can turn on protection via email themselves in their profile. Users with any level of minimum protection cannot turn it off.', 'rublon') . '</p>';
$settings = RublonHelper::getSettings('additional');
// Retrieve the roles used on this site.
$roles = RublonHelper::getUserRoles();
$role_ids = array();
echo '<div class="rublon-settings-setting-name">';
echo ' <div class="rublon-settings-setting-label"></div>';
echo ' <div class="rublon-setting-header"><strong>' . __('Minimum Protection', 'rublon') . '</strong></div>';
echo '</div>';
foreach ($roles as $role) {
$checked = '';
// Prepare role IDs used as the option keys.
$role_id = RublonHelper::prepareRoleId($role);
$role_ids[] = '\'' . $role_id . '\'';
if (!empty($settings[$role_id])) {
$mobileSelected = '';
$emailSelected = '';
$noneSelected = '';
$lock1Visibility = '';
$lock2Visibility = '';
$lock3Visibility = '';
// switch ($settings[$role_id]) {
switch (RublonRolesProtection::getRoleProtectionType($role)) {
case RublonHelper::PROTECTION_TYPE_MOBILE_EVERYTIME:
$mobileEverytimeSelected = ' selected';
$lock1Visibility = 'hidden';
$lock2Visibility = 'visible';
$lock3Visibility = 'visible';
$lock4Visibility = 'visible';
break;
case RublonHelper::PROTECTION_TYPE_MOBILE:
$mobileSelected = ' selected';
$lock1Visibility = 'hidden';
$lock2Visibility = 'visible';
$lock3Visibility = 'visible';
$lock4Visibility = 'hidden';
break;
case RublonHelper::PROTECTION_TYPE_EMAIL:
$emailSelected = ' selected';
$lock1Visibility = 'hidden';
$lock2Visibility = 'visible';
$lock3Visibility = 'hidden';
$lock4Visibility = 'hidden';
break;
case RublonHelper::PROTECTION_TYPE_NONE:
$noneSelected = ' selected';
$lock1Visibility = 'visible';
$lock2Visibility = 'hidden';
$lock3Visibility = 'hidden';
$lock4Visibility = 'hidden';
break;
}
}
if (!empty($settings[$role_id]) && $settings[$role_id] == 'on') {
$checked = ' checked';
}
echo '<div class="rublon-settings-setting-name">';
echo ' <label for="rublon-role-' . $role_id . '-dropdown" class="rublon-settings-setting-label"><div class="rublon-settings-setting-label">' . translate_user_role(before_last_bar($role)) . '</div></label>';
echo ' <select id="rublon-role-' . $role_id . '-dropdown" name="' . RublonHelper::RUBLON_ADDITIONAL_SETTINGS_KEY . '[' . $role_id . ']">';
$forceMobileApp = RublonFeature::checkFeature(RublonAPIGetAvailableFeatures::FEATURE_FORCE_MOBILE_APP);
if ($forceMobileApp and RublonFeature::checkFeature(RublonAPIGetAvailableFeatures::FEATURE_IGNORE_TRUSTED_DEVICE)) {
echo ' <option value="mobileEverytime"' . $mobileEverytimeSelected . '>' . __('Mobile app everytime', 'rublon') . '</option>';
}
if ($forceMobileApp) {
echo ' <option value="mobile"' . $mobileSelected . '>' . __('Mobile app', 'rublon') . '</option>';
}
echo ' <option value="email"' . $emailSelected . '>' . __('Email', 'rublon') . '</option>';
echo ' <option value="none"' . $noneSelected . '>' . __('None', 'rublon') . '</option>';
echo ' </select>';
echo '<label class="rublon-label rublon-label-' . $role_id . '" for="rublon-role-' . $role_id . '-dropdown">';
echo ' <div class="rublon-lock-container rublon-unlocked-container rublon-' . $role_id . '-unlocked ' . $lock1Visibility . '"><img class="rublon-lock rublon-unlocked" src="' . RUBLON2FACTOR_PLUGIN_URL . '/assets/images/unlocked.png" /></div>';
echo ' <div class="rublon-lock-container rublon-locked-container rublon-' . $role_id . '-locked ' . $lock2Visibility . '"><img class="rublon-lock rublon-locked" src="' . RUBLON2FACTOR_PLUGIN_URL . '/assets/images/locked.png" /></div>';
echo ' <div class="rublon-lock-container rublon-locked-container rublon-' . $role_id . '-locked2 ' . $lock3Visibility . '"><img class="rublon-lock rublon-locked" src="' . RUBLON2FACTOR_PLUGIN_URL . '/assets/images/locked.png" /></div>';
echo ' <div class="rublon-lock-container rublon-locked-container rublon-' . $role_id . '-locked3 ' . $lock4Visibility . '"><img class="rublon-lock rublon-locked" src="' . RUBLON2FACTOR_PLUGIN_URL . '/assets/images/locked.png" /></div>';
echo '</label>';
echo '</div>';
}
echo '<script>//<![CDATA[
if (RublonWP) {
RublonWP.roles = [' . implode(', ', $role_ids) . '];
RublonWP.setUpRoleProtectionTypeChangeListener();
}
//]]></script>';
}
