Exemplo n.º 1
0
/**
 * Overwrites capabilities in certain scenarios.
 *
 * @since  1.0.0
 * @access public
 * @param  array   $caps
 * @param  string  $cap
 * @param  int     $user_id
 * @param  array   $args
 * @return array
 */
function mb_forum_map_meta_cap($caps, $cap, $user_id, $args)
{
    /* Checks if a user can read a specific forum. */
    if ('read_post' === $cap && mb_is_forum($args[0])) {
        $post = get_post($args[0]);
        if ($user_id != $post->post_author) {
            $parent_id = $post->post_parent;
            /* If we have a parent forum and the user can't read it, don't allow reading this forum. */
            if (0 < $parent_id && !mb_user_can($user_id, 'read_forum', $parent_id)) {
                $caps = array('do_not_allow');
                /* If the user can read the parent forum, check if they can read this one. */
            } else {
                $post_type = get_post_type_object($post->post_type);
                $post_status = mb_get_forum_status($post->ID);
                $status_obj = get_post_status_object($post_status);
                if (mb_get_hidden_post_status() === $status_obj->name) {
                    $caps[] = $post_type->cap->read_hidden_forums;
                } elseif (mb_get_private_post_status() === $status_obj->name) {
                    $caps[] = $post_type->cap->read_private_posts;
                } elseif ($post_type->cap->read !== $post_type->cap->read_others_forums) {
                    $caps[] = $post_type->cap->read_others_forums;
                } else {
                    $caps = array();
                }
            }
        } else {
            $caps = array();
        }
        /* Meta cap for editing a single forum. */
    } elseif ('edit_post' === $cap && mb_is_forum($args[0])) {
        $post = get_post($args[0]);
        $forum_obj = get_post_type_object(mb_get_forum_post_type());
        if ($user_id != $post->post_author) {
            // Open forums.
            if (mb_is_forum_open($args[0])) {
                $caps[] = $forum_obj->cap->edit_open_forums;
            } elseif (mb_is_forum_closed($args[0])) {
                $caps[] = $forum_obj->cap->edit_closed_forums;
            } elseif (mb_is_forum_hidden($args[0])) {
                $caps[] = $forum_obj->cap->edit_hidden_forums;
            }
        }
        /* Meta cap for opening a single forum. */
    } elseif ('open_forum' === $cap) {
        $caps = array();
        $caps[] = user_can($user_id, 'edit_forum', $args[0]) ? 'open_forums' : 'do_not_allow';
        /* Meta cap for closing a single forum. */
    } elseif ('close_forum' === $cap) {
        $caps = array();
        $caps[] = user_can($user_id, 'edit_forum', $args[0]) ? 'close_forums' : 'do_not_allow';
        /* Meta cap for privatizing a single forum. */
    } elseif ('privatize_forum' === $cap) {
        $caps = array();
        $caps[] = user_can($user_id, 'edit_forum', $args[0]) ? 'privatize_forums' : 'do_not_allow';
        /* Meta cap for hiding a single forum. */
    } elseif ('hide_forum' === $cap) {
        $caps = array();
        $caps[] = user_can($user_id, 'edit_forum', $args[0]) ? 'hide_forums' : 'do_not_allow';
        /* Meta cap for spamming a single forum. */
    } elseif ('archive_forum' === $cap) {
        $caps = array();
        $caps[] = user_can($user_id, 'edit_forum', $args[0]) ? 'archive_forums' : 'do_not_allow';
        /* Meta cap for deleting a specific forum. */
    } elseif ('delete_post' === $cap && mb_is_forum($args[0])) {
        $forum_id = mb_get_forum_id($args[0]);
        if (mb_get_default_forum_id() === $forum_id) {
            $caps = array('do_not_allow');
        }
        /* Meta cap check for accessing the forum form. */
    } elseif ('access_forum_form' === $cap) {
        $caps = array('create_forums');
        /* If this is a single forum page, check if user can create sub-forums. */
        if (mb_is_single_forum()) {
            $forum_id = mb_get_forum_id();
            if (!current_user_can('read_forum', $forum_id)) {
                $caps[] = 'do_not_allow';
            } elseif (!mb_forum_allows_subforums($forum_id)) {
                $caps[] = 'do_not_allow';
            }
        } elseif (mb_is_forum_edit() && !user_can($user_id, 'edit_post', mb_get_forum_id())) {
            $caps[] = 'do_not_allow';
        }
    }
    return $caps;
}
Exemplo n.º 2
0
<?php

/**
 * This template part outputs the edit page content.
 */
?>

<header class="mb-page-header">
	<h1 class="mb-page-title"><?php 
mb_edit_page_title();
?>
</h1>
</header><!-- .mb-page-header -->

<?php 
if (mb_is_forum_edit()) {
    // If viewing the forum edit page.
    ?>

	<?php 
    mb_get_template_part('form-forum', 'edit');
    ?>

<?php 
} elseif (mb_is_topic_edit()) {
    // If viewing the topic edit page.
    ?>

	<?php 
    mb_get_template_part('form-topic', 'edit');
    ?>
Exemplo n.º 3
0
function mb_get_edit_page_title()
{
    $title = '';
    if (mb_is_forum_edit()) {
        $title = sprintf(mb_get_forum_label('mb_form_edit_item'), mb_get_forum_title());
    } elseif (mb_is_topic_edit()) {
        $title = sprintf(mb_get_topic_label('mb_form_edit_item'), mb_get_topic_title());
    } elseif (mb_is_reply_edit()) {
        $title = sprintf(mb_get_reply_label('mb_form_edit_item'), mb_get_reply_title());
    } elseif (mb_is_user_edit()) {
        $title = __('Edit User', 'message-board');
    }
    return apply_filters('mb_get_edit_title', $title);
}
Exemplo n.º 4
0
/**
 * Builds the template hierarchy for the plugin.  This function figures out what the current page 
 * is and returns an array of possible templates to use.  Note that this function only returns 
 * the templates name and not a full paths.  It is meant to be used within other functions that actually 
 * locate/load the templates.
 *
 * @since  1.0.0
 * @access public
 * @return array
 */
function mb_get_template_hierarchy()
{
    $hierarchy = array();
    /* If viewing a single forum page. */
    if (mb_is_single_forum()) {
        $hierarchy[] = 'single-forum.php';
        /* If viewing the forum archive (default forum front). */
    } elseif (mb_is_forum_archive()) {
        $hierarchy[] = 'archive-forum.php';
        /* If viewing a single topic. */
    } elseif (mb_is_single_topic()) {
        $hierarchy[] = "single-topic.php";
        /* If viewing the topic archive (possible forum front page). */
    } elseif (mb_is_topic_archive()) {
        $hierarchy[] = 'archive-topic.php';
        /* If viewing a single reply. */
    } elseif (mb_is_single_reply()) {
        $hierarchy[] = "single-reply.php";
        /* If viewing the reply archive. */
    } elseif (mb_is_reply_archive()) {
        $hierarchy[] = 'archive-reply.php';
    } elseif (mb_is_role_archive()) {
        $hierarchy[] = 'archive-role.php';
    } elseif (mb_is_single_role()) {
        $hierarchy[] = 'single-role.php';
        /* If viewing a user sub-page. */
    } elseif (mb_is_user_page()) {
        $page = sanitize_key(get_query_var('mb_user_page'));
        $hierarchy[] = "single-user-{$page}.php";
        $hierarchy[] = 'single-user.php';
        /* If viewing a user profile page. */
    } elseif (mb_is_single_user()) {
        $hierarchy[] = 'single-user.php';
        /* If viewing the user archive. */
    } elseif (mb_is_user_archive()) {
        $hierarchy[] = 'archive-user.php';
        /* If viewing a search results page. */
    } elseif (mb_is_search_results()) {
        $hierarchy[] = 'search-results.php';
        /* If viewing the advanced search page. */
    } elseif (mb_is_search()) {
        $hierarchy[] = 'search.php';
        /* If viewing the forum login page. */
    } elseif (mb_is_forum_login()) {
        $hierarchy[] = 'login.php';
        /* If viewing an edit page. */
    } elseif (mb_is_edit()) {
        if (mb_is_forum_edit()) {
            $hierarchy[] = 'edit-forum.php';
        } elseif (mb_is_topic_edit()) {
            $hierarchy[] = 'edit-topic.php';
        } elseif (mb_is_reply_edit()) {
            $hierarchy[] = 'edit-reply.php';
        } elseif (mb_is_user_edit()) {
            $hierarchy[] = 'edit-user.php';
        }
        $hierarchy[] = 'edit.php';
    }
    /* Add the fallback template. */
    $hierarchy[] = 'board.php';
    return apply_filters('mb_get_template_hierarchy', $hierarchy);
}
Exemplo n.º 5
0
/**
 * Figures out whether we're on an edit page and whether the current user has permission to be here.
 *
 * @since  1.0.0
 * @access public
 * @return void
 */
function mb_handler_edit_access()
{
    if (mb_is_edit()) {
        if (mb_is_forum_edit() && !current_user_can('edit_forum', mb_get_forum_id())) {
            mb_bring_the_doom('no-permission');
        } elseif (mb_is_topic_edit() && !current_user_can('edit_topic', mb_get_topic_id())) {
            mb_bring_the_doom('no-permission');
        } elseif (mb_is_reply_edit() && !current_user_can('edit_reply', mb_get_reply_id())) {
            mb_bring_the_doom('no-permission');
        } elseif (mb_is_user_edit() && !current_user_can('edit_user', mb_get_user_id())) {
            mb_bring_the_doom('no-permission');
        } elseif (!mb_is_forum_edit() && !mb_is_topic_edit() && !mb_is_reply_edit() && !mb_is_user_edit()) {
            mb_bring_the_doom('no-permission');
        }
    }
}