Name	Size	Mode	Actions
Access.php	10868	0644	editdlrm

hooks(); } /** * Access settings panel hooks. * * @since 1.5.8 */ public function hooks() { add_filter( 'wpforms_settings_tabs', [ $this, 'add_tab' ] ); add_filter( 'wpforms_settings_defaults', [ $this, 'add_section' ] ); add_filter( 'wpforms_settings_exclude_view', [ $this, 'exclude_view' ] ); add_filter( 'wpforms_settings_custom_process', [ $this, 'process_settings' ], 10, 2 ); if ( wpforms_is_admin_page( 'settings', 'access' ) ) { add_action( 'admin_enqueue_scripts', [ $this, 'enqueues' ] ); } } /** * Load enqueues. * * @since 1.5.8.2 */ public function enqueues() { $min = \wpforms_get_min_suffix(); \wp_enqueue_script( 'wpforms-settings-access', \WPFORMS_PLUGIN_URL . "assets/pro/js/admin/settings-access{$min}.js", [ 'jquery', 'jquery-confirm' ], \WPFORMS_VERSION, true ); \wp_localize_script( 'wpforms-settings-access', 'wpforms_settings_access', [ 'labels' => [ 'caps' => \wpforms()->get( 'access' )->get_caps(), 'roles' => \wp_list_pluck( \get_editable_roles(), 'name' ), ], 'l10n' => [ /* translators: %1$s - capability being granted; %2$s - capability(s) required for a capability being granted; %3$s - role a capability is granted to. */ 'grant_caps' => '

' . \esc_html__( 'In order to give %1$s access, %2$s access is also required.', 'wpforms' ) . '

' . \esc_html__( 'Would you like to also grant %2$s access to %3$s?', 'wpforms' ) . '

', /* translators: %1$s - capability being granted; %2$s - capability(s) required for a capability being granted; %3$s - role a capability is granted to. */ 'remove_caps' => '

' . \esc_html__( 'In order to remove %1$s access, %2$s access is also required to be removed.', 'wpforms' ) . '

' . \esc_html__( 'Would you like to also remove %2$s access from %3$s?', 'wpforms' ) . '

', ], ] ); } /** * Get Access settings panel labels. * * @since 1.5.8 */ protected function get_caps_settings_labels() { return [ 'create_forms' => [ 'title' => \esc_html__( 'Create Forms', 'wpforms' ), 'caps' => [ 'wpforms_create_forms' => [ 'title' => '', 'desc' => '', ], ], ], 'view_forms' => [ 'title' => \esc_html__( 'View Forms', 'wpforms' ), 'caps' => [ 'wpforms_view_own_forms' => [ 'title' => \esc_html__( 'Own', 'wpforms' ), 'desc' => \esc_html__( 'Can view forms created by themselves.', 'wpforms' ), ], 'wpforms_view_others_forms' => [ 'title' => \esc_html__( 'Others', 'wpforms' ), 'desc' => \esc_html__( 'Can view forms created by others.', 'wpforms' ), ], ], ], 'edit_forms' => [ 'title' => \esc_html__( 'Edit Forms', 'wpforms' ), 'caps' => [ 'wpforms_edit_own_forms' => [ 'title' => \esc_html__( 'Own', 'wpforms' ), 'desc' => \esc_html__( 'Can edit forms created by themselves.', 'wpforms' ), ], 'wpforms_edit_others_forms' => [ 'title' => \esc_html__( 'Others', 'wpforms' ), 'desc' => \esc_html__( 'Can edit forms created by others.', 'wpforms' ), ], ], ], 'delete_forms' => [ 'title' => \esc_html__( 'Delete Forms', 'wpforms' ), 'caps' => [ 'wpforms_delete_own_forms' => [ 'title' => \esc_html__( 'Own', 'wpforms' ), 'desc' => \esc_html__( 'Can delete forms created by themselves.', 'wpforms' ), ], 'wpforms_delete_others_forms' => [ 'title' => \esc_html__( 'Others', 'wpforms' ), 'desc' => \esc_html__( 'Can delete forms created by others.', 'wpforms' ), ], ], ], // Entry categories. 'view_entries' => [ 'title' => \esc_html__( 'View Entries', 'wpforms' ), 'caps' => [ 'wpforms_view_entries_own_forms' => [ 'title' => \esc_html__( 'Own', 'wpforms' ), 'desc' => \esc_html__( 'Can view entries of forms created by themselves.', 'wpforms' ), ], 'wpforms_view_entries_others_forms' => [ 'title' => \esc_html__( 'Others', 'wpforms' ), 'desc' => \esc_html__( 'Can view entries of forms created by others.', 'wpforms' ), ], ], ], 'edit_entries' => [ 'title' => \esc_html__( 'Edit Entries', 'wpforms' ), 'caps' => [ 'wpforms_edit_entries_own_forms' => [ 'title' => \esc_html__( 'Own', 'wpforms' ), 'desc' => \esc_html__( 'Can edit entries of forms created by themselves.', 'wpforms' ), ], 'wpforms_edit_entries_others_forms' => [ 'title' => \esc_html__( 'Others', 'wpforms' ), 'desc' => \esc_html__( 'Can edit entries of forms created by others.', 'wpforms' ), ], ], ], 'delete_entries' => [ 'title' => \esc_html__( 'Delete Entries', 'wpforms' ), 'caps' => [ 'wpforms_delete_entries_own_forms' => [ 'title' => \esc_html__( 'Own', 'wpforms' ), 'desc' => \esc_html__( 'Can delete entries of forms created by themselves.', 'wpforms' ), ], 'wpforms_delete_entries_others_forms' => [ 'title' => \esc_html__( 'Others', 'wpforms' ), 'desc' => \esc_html__( 'Can delete entries of forms created by others.', 'wpforms' ), ], ], ], ]; } /** * Add Access settings tab on the left of Misc tab. * * @since 1.5.8 * * @param array $tabs Settings tabs. * * @return array */ public function add_tab( $tabs ) { $tab = [ self::SLUG => [ 'name' => \esc_html__( 'Access', 'wpforms' ), 'form' => true, 'submit' => \esc_html__( 'Save Settings', 'wpforms' ), ], ]; return \wpforms_list_insert_after( $tabs, 'geolocation', $tab ); } /** * Add Access settings section. * * @since 1.5.8 * * @param array $settings Settings sections. * * @return array */ public function add_section( $settings ) { $settings[ self::SLUG ][ self::SLUG . '-heading' ] = [ 'id' => self::SLUG . '-heading', 'content' => '

' . esc_html__( 'Access', 'wpforms' ) . '

' . sprintf( wp_kses( /* translators: %s - WPForms.com access control link. */ __( 'Select the user roles that are allowed to manage different aspects of WPForms. By default, all permissions are provided only to administrator users. Please see our Access Controls documentation for full details.', 'wpforms' ), [ 'a' => [ 'href' => [], 'target' => [], 'rel' => [], ], ] ), esc_url( wpforms_utm_link( 'https://wpforms.com/docs/how-to-set-up-access-controls-in-wpforms/', 'Settings - Access', 'Access Control Documentation' ) ) ) . '

', 'type' => 'content', 'no_label' => true, 'class' => [ 'section-heading' ], ]; $labels = $this->get_caps_settings_labels(); $roles = get_editable_roles(); $caps = wpforms()->get( 'access' )->get_caps(); $master_cap = wpforms_get_capability_manage_options(); // Get a list of assigned capabilities for every role. foreach ( $roles as $role => $details ) { if ( $role === $master_cap || ! empty( $details['capabilities'][ $master_cap ] ) ) { continue; } $options[ $role ] = $details['name']; $role_caps[ $role ] = array_intersect_key( $caps, array_filter( $details['capabilities'] ) ); } foreach ( $labels as $row_id => $row ) { $columns = []; foreach ( $row['caps'] as $cap_id => $cap ) { $selected = array_keys( wp_list_filter( $role_caps, [ $cap_id => $caps[ $cap_id ] ] ) ); $columns[ $cap_id ] = [ 'id' => $cap_id, 'name' => esc_html( $cap['title'] ), 'desc' => esc_html( $cap['desc'] ), 'type' => 'select', 'choicesjs' => true, 'multiple' => true, 'options' => $options, 'selected' => $selected, 'data' => [ 'cap' => $cap_id ], ]; } $settings[ self::SLUG ][ $row_id ] = [ 'id' => $row_id, 'name' => esc_html( $row['title'] ), 'type' => 'columns', 'columns' => $columns, ]; } return $settings; } /** * Exclude Access settings from a saved settings list. * * @since 1.5.8 * * @param array $exclude_views Views to exclude from saving. * * @return array */ public function exclude_view( $exclude_views ) { $exclude_views[] = self::SLUG; return $exclude_views; } /** * Run own processing of a settings view. * * @since 1.5.8 * * @param string $view Settings view slug. * @param array $rows Set of settings fields rows for Access view. */ public function process_settings( $view, $rows ) { if ( $view !== self::SLUG ) { return; } // Check nonce and other various security checks. if ( ! isset( $_POST['wpforms-settings-submit'] ) || empty( $_POST['nonce'] ) ) { return; } if ( ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_POST['nonce'] ) ), 'wpforms-settings-nonce' ) ) { return; } if ( ! wpforms_current_user_can() ) { return; } $columns = wp_filter_object_list( $rows, [ 'type' => 'columns' ], 'and', 'columns' ); foreach ( $columns as $column ) { if ( empty( $column ) || ! is_array( $column ) ) { continue; } foreach ( $column as $cap_id => $cap ) { $value = isset( $_POST[ $cap_id ] ) && is_array( $_POST[ $cap_id ] ) ? array_map( 'sanitize_text_field', wp_unslash( $_POST[ $cap_id ] ) ) : []; $value_prev = isset( $cap['selected'] ) ? $cap['selected'] : []; $add_cap_roles = array_diff( $value, $value_prev ); $remove_cap_roles = array_diff( $value_prev, $value ); $this->save_caps( $cap_id, $add_cap_roles, $remove_cap_roles ); } } } /** * Add or remove a capability to a set of roles. * * @since 1.5.8 * * @param string $cap_id Capability name. * @param array $add_cap_roles Set of roles to add the capability to. * @param array $remove_cap_roles Set of roles to remove the capability from. */ protected function save_caps( $cap_id, $add_cap_roles, $remove_cap_roles ) { if ( empty( $add_cap_roles ) && empty( $remove_cap_roles ) ) { return; } \WPForms\Pro\Admin\DashboardWidget::clear_widget_cache(); \WPForms\Pro\Admin\Entries\DefaultScreen::clear_widget_cache(); $roles = \get_editable_roles(); foreach ( $add_cap_roles as $role ) { if ( \array_key_exists( $role, $roles ) ) { \get_role( $role )->add_cap( $cap_id ); } } foreach ( $remove_cap_roles as $role ) { if ( \array_key_exists( $role, $roles ) ) { \get_role( $role )->remove_cap( $cap_id ); } } } }