first

wp-content/plugins/shortpixel-image-optimiser/class/Model/AccessModel.php

@@ -0,0 +1,140 @@
+<?php
+namespace ShortPixel\Model;
+
+if ( ! defined( 'ABSPATH' ) ) {
+ exit; // Exit if accessed directly.
+}
+
+use ShortPixel\ShortPixelLogger\ShortPixelLogger as Log;
+use ShortPixel\Controller\QuotaController as QuotaController;
+
+// Central place for user / access checking, roles etc.
+class AccessModel
+{
+
+  // Instance of class
+	private static $instance;
+
+  // Array of known SPIO Capabilities mapped to WordPress variants
+	private $caps;
+
+  // int  . The current user id
+	private $current_user_id;
+
+
+	public function __construct()
+	{
+		 $this->setDefaultPermissions();
+	}
+
+	protected function setDefaultPermissions()
+	{
+
+			$spioCaps = array(
+					'notices' =>  'activate_plugins',				// used in AdminNoticesController
+					'quota-warning' => 'manage_options',    // used in AdminController
+					'image_all' =>  'edit_others_posts',
+					'image_user' => 'edit_post',
+					'custom_all' => 'edit_others_posts',
+					'is_admin_user' => 'manage_options',
+					'actions' => array(),
+			);
+
+		 $spioCaps = apply_filters('shortpixel/init/permissions', $spioCaps);
+		 // $this->cap_actions = bla.
+		 $this->caps = $spioCaps;
+
+	}
+
+	public static function getInstance()
+	{
+			 if (is_null(self::$instance))
+       {
+			 	 self::$instance = new AccessModel();
+       }
+
+			return self::$instance;
+	}
+
+	/** Check for allowing a notice
+	*  @param $notice Object of type notice.
+	*/
+	public function noticeIsAllowed($notice)
+	{
+			$cap = $this->getCap('notices');
+			return $this->user()->has_cap($cap);
+	}
+
+	/*
+	@param SPIO capability to check again the user WordPress permissions.
+	*/
+	public function userIsAllowed($cap)
+	{
+			$cap = $this->getCap($cap);
+			return $this->user()->has_cap($cap);
+	}
+
+	public function imageIsEditable($mediaItem)
+	{
+			$type = $mediaItem->get('type');
+			if ($type == 'custom' )
+			{
+				 return $this->user()->has_cap($this->getCap('custom_all'), $mediaItem->get('id'));
+			}
+		  elseif ($type == 'media') // media
+			{
+				if ($this->user()->has_cap($this->getCap('image_all'), $mediaItem->get('id')) || $this->user()->has_cap($this->getCap('image_user'), $mediaItem->get('id'))  )
+				{
+						return true;
+				}
+			}
+			return false;
+	}
+
+	public function isFeatureAvailable($name)
+	{
+		 $available = true;
+
+		 switch($name)
+		 {
+			  case 'avif':
+					$quotaControl = QuotaController::getInstance();
+					$quota = $quotaControl->getQuota();
+
+					if (property_exists($quota, 'unlimited') && $quota->unlimited === true)
+					{
+						$available = false;
+					}
+
+				break;
+				case 'webp':
+				default:
+
+				break;
+		 }
+		 return $available;
+	}
+
+
+	protected function user()
+	{
+				return wp_get_current_user();
+	}
+
+	/** Find the needed capability
+	*
+	* This translates a SPIO capability into the associated cap that is registered within WordPress.
+	*
+	* @param $cap The required Capability
+	* @param $default The default value if not found. This is defaults to an admin cap to prevent access leaking.
+	*/
+	protected function getCap($cap, $default = 'manage_options')
+	{
+		  if (isset($this->caps[$cap]))
+				return $this->caps[$cap];
+			else
+				return $default;
+	}
+
+
+} // CLASS