61 lines
1.8 KiB
PHP
61 lines
1.8 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
if ( ! defined( 'ABSPATH' ) ) {
|
||
|
|
exit; // Exit if accessed directly.
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Central definition and lifecycle for the plugin's custom capability.
|
||
|
|
*
|
||
|
|
* `manage_reservations` gates every administrative REST endpoint. It is granted to the
|
||
|
|
* roles in DEFAULT_ROLES on activation.
|
||
|
|
*
|
||
|
|
* Because WordPress only runs the activation hook on *activate* (never on a
|
||
|
|
* plugin update), ensure() re-grants the capability when the stored version
|
||
|
|
* lags behind, so an update can never silently lock admins out of the API.
|
||
|
|
*/
|
||
|
|
final class RsvCapabilities {
|
||
|
|
/** The capability that authorises managing reservation data. */
|
||
|
|
public const MANAGE = 'manage_reservations';
|
||
|
|
|
||
|
|
/** Bumped whenever the capability set changes, to drive re-grants on update. */
|
||
|
|
public const VERSION = '1';
|
||
|
|
|
||
|
|
/** Option that records which capability VERSION has been applied. */
|
||
|
|
private const VERSION_OPTION = 'rsv_caps_version';
|
||
|
|
|
||
|
|
/** Roles that receive the capability by default. */
|
||
|
|
private const DEFAULT_ROLES = [ 'administrator' ];
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Grant the capability to the default roles, then record the version.
|
||
|
|
* Idempotent and safe to call on activation and on every bootstrap.
|
||
|
|
*/
|
||
|
|
public static function ensure(): void {
|
||
|
|
if ( get_option( self::VERSION_OPTION ) === self::VERSION ) {
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
|
||
|
|
foreach ( self::DEFAULT_ROLES as $role_name ) {
|
||
|
|
$role = get_role( $role_name );
|
||
|
|
if ( $role && ! $role->has_cap( self::MANAGE ) ) {
|
||
|
|
$role->add_cap( self::MANAGE );
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
update_option( self::VERSION_OPTION, self::VERSION );
|
||
|
|
}
|
||
|
|
|
||
|
|
/** Remove the capability from every role and clear the version marker. */
|
||
|
|
public static function revoke(): void {
|
||
|
|
foreach ( array_keys( wp_roles()->roles ) as $role_name ) {
|
||
|
|
$role = get_role( $role_name );
|
||
|
|
if ( $role ) {
|
||
|
|
$role->remove_cap( self::MANAGE );
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
delete_option( self::VERSION_OPTION );
|
||
|
|
}
|
||
|
|
}
|