khaihihi

wp-content/plugins/wordpress-seo/admin/capabilities/class-register-capabilities.php

@@ -0,0 +1,76 @@
+<?php
+/**
+ * WPSEO plugin file.
+ *
+ * @package WPSEO\Admin\Capabilities
+ */
+
+/**
+ * Capabilities registration class.
+ */
+class WPSEO_Register_Capabilities implements WPSEO_WordPress_Integration {
+
+	/**
+	 * Registers the hooks.
+	 *
+	 * @return void
+	 */
+	public function register_hooks() {
+		add_action( 'wpseo_register_capabilities', [ $this, 'register' ] );
+
+		if ( is_multisite() ) {
+			add_action( 'user_has_cap', [ $this, 'filter_user_has_wpseo_manage_options_cap' ], 10, 4 );
+		}
+	}
+
+	/**
+	 * Registers the capabilities.
+	 *
+	 * @return void
+	 */
+	public function register() {
+		$manager = WPSEO_Capability_Manager_Factory::get();
+
+		$manager->register( 'wpseo_bulk_edit', [ 'editor', 'wpseo_editor', 'wpseo_manager' ] );
+		$manager->register( 'wpseo_edit_advanced_metadata', [ 'wpseo_editor', 'wpseo_manager' ] );
+
+		$manager->register( 'wpseo_manage_options', [ 'administrator', 'wpseo_manager' ] );
+	}
+
+	/**
+	 * Revokes the 'wpseo_manage_options' capability from administrator users if it should only
+	 * only be granted to network administrators.
+	 *
+	 * @param array   $allcaps An array of all the user's capabilities.
+	 * @param array   $caps    Actual capabilities being checked.
+	 * @param array   $args    Optional parameters passed to has_cap(), typically object ID.
+	 * @param WP_User $user    The user object.
+	 *
+	 * @return array Possibly modified array of the user's capabilities.
+	 */
+	public function filter_user_has_wpseo_manage_options_cap( $allcaps, $caps, $args, $user ) {
+
+		// We only need to do something if 'wpseo_manage_options' is being checked.
+		if ( ! in_array( 'wpseo_manage_options', $caps, true ) ) {
+			return $allcaps;
+		}
+
+		// If the user does not have 'wpseo_manage_options' anyway, we don't need to revoke access.
+		if ( empty( $allcaps['wpseo_manage_options'] ) ) {
+			return $allcaps;
+		}
+
+		// If the user does not have 'delete_users', they are not an administrator.
+		if ( empty( $allcaps['delete_users'] ) ) {
+			return $allcaps;
+		}
+
+		$options = WPSEO_Options::get_instance();
+
+		if ( $options->get( 'access' ) === 'superadmin' && ! is_super_admin( $user->ID ) ) {
+			unset( $allcaps['wpseo_manage_options'] );
+		}
+
+		return $allcaps;
+	}
+}