Changeset 6571 for trunk/src/includes/forums/capabilities.php

Timestamp:

06/16/2017 07:45:05 PM (7 years ago)

Author:

johnjamesjacoby

Message:

Capabilities: Logic improvements to help with per-forum moderation.

• Introduce moderate_forum capability check, used to check if a user has the ability to moderate a specific forum
• Limit number of direct keep_gate checks, and use bbp_is_user_keymaster() where possible
• Make bbp_is_user_forum_moderator() check the new moderate_forum mapped capability
• Have the moderate mapped capability check moderate_forum if the $args[0] can be bubbled up to being a forum ID
• Map admin post-type areas to their appropriate edit_ capabilities – they are now properly handled via other mapped conditions

This change (along with r6567 & r6569) allows private & hidden forums to appear in forums queries for users who can moderate them.

File:

• trunk/src/includes/forums/capabilities.php (modified) (5 diffs)

trunk/src/includes/forums/capabilities.php

@@ -108 +108 @@
             break;
 
+        /** Moderating ********************************************************/
+
+        case 'moderate_forum' :
+
+            // Get the post
+            $_post = get_post( $args[0] );
+            if ( ! empty( $_post ) && bbp_allow_forum_mods() ) {
+
+                // Make sure feature is enabled & user is mod on this forum
+                if ( bbp_is_object_of_user( $_post->ID, $user_id, '_bbp_moderator_id' ) ) {
+                    $caps = array( 'spectate' );
+                }
+            }
+
+            break;
+
         /** Publishing ********************************************************/
 
@@ -126 +142 @@
 
             // Moderators can always edit
-            if ( user_can( $user_id, 'keep_gate' ) ) {
-                $caps = array( 'keep_gate' );
+            if ( bbp_is_user_keymaster( $user_id ) ) {
+                $caps = array( 'spectate' );
 
             // Otherwise, block
@@ -150 +166 @@
                     $caps = array( 'do_not_allow' );
 
+                // Moderators can always read forum content
+                } elseif ( user_can( $user_id, 'moderate', $_post->ID ) ) {
+                    $caps = array( 'spectate' );
+
                 // User is author so allow edit if not in admin
                 } elseif ( ! is_admin() && ( (int) $user_id === (int) $_post->post_author ) ) {
                     $caps = array( $post_type->cap->edit_posts );
-
-                // Moderators can always read forum content
-                } elseif ( user_can( $user_id, 'moderate', $_post->ID ) ) {
-                    $caps = array( 'spectate' );
 
                 // Unknown, so map to edit_others_posts
@@ -198 +214 @@
         // Forum admin area.
         case 'bbp_forums_admin' :
-            $caps = array( 'keep_gate' );
+            $caps = array( 'edit_forums' );
             break;
     }
@@ -248 +264 @@
  */
 function bbp_is_user_forum_moderator( $user_id = 0, $forum_id = 0 ) {
-
-    // Validate user ID - fallback to current user if no ID passed.
-    $user_id  = bbp_get_user_id( $user_id, false, ! empty( $user_id ) );
+    $user_id  = bbp_get_user_id( $user_id, false, empty( $user_id ) );
     $forum_id = bbp_get_forum_id( $forum_id );
-
-    // Check if per-forum moderation is enabled, or assume false
-    $retval = bbp_allow_forum_mods()
-        ? bbp_is_object_of_user( $forum_id, $user_id, '_bbp_moderator_id' )
-        : false;
+    $retval   = user_can( $user_id, 'moderate_forum', $forum_id );
 
     // Filter & return