'; screen_icon(); echo '

' . __( 'Map Capabilities', 'map-cap' ) . '

'; // Start of the Map Meta Cap settings form if( ! empty( $post_types ) || ! empty( $mapped_post_types ) ) { echo '

'; wp_nonce_field( 'mc_capabilities_settings', 'mc_nonce' ); } if ( empty( $mapped_post_types ) ) : ?>

', '' )?>

capability_type; $post_type_caps = $post_type_details->cap; ?>

labels->name ); ?>

labels->name ); ?>

capabilities[ $post_type_caps->publish_posts ] ), 1 ); ?> /> display_name; ?>

labels->name ); ?>

capabilities[ $post_type_caps->edit_published_posts ] ), 1 ); ?> /> display_name; ?>

labels->name ); ?>

capabilities[ $post_type_caps->edit_others_posts ] ), 1 ); ?> /> display_name; ?>

labels->name ); ?>

capabilities[ $post_type_caps->read_private_posts] ), 1 ); ?> /> display_name; ?>

', '' ); ?>

map_meta_cap, 1 ); ?> /> labels->name; ?>

get_names(); $roles = array(); foreach ( $role_names as $key=>$value ) { $roles[ $key ] = get_role( $key ); $roles[ $key ]->display_name = $value; } $post_types = get_post_types( array( 'public' => true, '_builtin' => false ) ); $dont_touch = get_post_types( array( 'capability_type' => 'post' ) ); $not_mapped = get_post_types( array( 'map_meta_cap' => false ) ); // Don't edit capabilties for any custom post type with "post" as its capability type $post_types = array_diff( $post_types, $dont_touch ); $force_map_types = get_option( 'mc_force_map_meta_cap', array() ); foreach( $post_types as $post_type ) { // Shared capability required to see post's menu & publish posts if ( ( isset( $_POST[ $post_type.'-map' ] ) && $_POST[ $post_type.'-map' ] == 'on' ) ) { $force_map_types[$post_type] = true; } else { $force_map_types[$post_type] = false; } } update_option( 'mc_force_map_meta_cap', $force_map_types ); // For mapping capabilities, post type needs to have map_meta_cap set to true $mapped_post_types = array_diff( $post_types, $not_mapped ); foreach ( $roles as $key => $role ) { foreach( $mapped_post_types as $post_type ) { $post_type_details = get_post_type_object( $post_type ); $post_type_cap = $post_type_details->capability_type; $post_type_caps = $post_type_details->cap; $post_role = $post_type.'-'.$key; // Shared capability required to see post's menu & publish posts if ( ( isset( $_POST[ $post_role.'-publish' ] ) && $_POST[ $post_role.'-publish' ] == 'on' ) || ( isset( $_POST[ $post_role.'-edit' ] ) && $_POST[ $post_role.'-edit' ] == 'on' ) || ( isset( $_POST[ $post_role.'-edit-others' ] ) && $_POST[ $post_role.'-edit-others' ] == 'on' ) ) { $role->add_cap( $post_type_caps->edit_posts ); } else { $role->remove_cap( $post_type_caps->edit_posts ); } // Shared capability required to delete posts if ( ( isset( $_POST[ $post_role.'-publish' ] ) && $_POST[ $post_role.'-publish' ] == 'on' ) || ( isset( $_POST[ $post_role.'-edit' ] ) && $_POST[ $post_role.'-edit' ] == 'on' ) ) { $role->add_cap( $post_type_caps->delete_posts ); } else { $role->remove_cap( $post_type_caps->delete_posts ); } // Allow publish if ( isset( $_POST[ $post_role.'-publish' ] ) && $_POST[ $post_role.'-publish' ] == 'on' ) { $role->add_cap( $post_type_caps->publish_posts ); } else { $role->remove_cap( $post_type_caps->publish_posts ); } // Allow editing own posts if ( ( isset( $_POST[ $post_role.'-edit' ] ) && $_POST[ $post_role.'-edit' ] == 'on' ) || ( isset( $_POST[ $post_role.'-edit-others' ] ) && $_POST[ $post_role.'-edit-others' ] == 'on' ) ) { $role->add_cap( $post_type_caps->edit_published_posts ); $role->add_cap( $post_type_caps->edit_private_posts ); $role->add_cap( $post_type_caps->delete_published_posts ); $role->add_cap( $post_type_caps->delete_private_posts ); } else { $role->remove_cap( $post_type_caps->edit_published_posts ); $role->remove_cap( $post_type_caps->edit_private_posts ); $role->remove_cap( $post_type_caps->delete_published_posts ); $role->remove_cap( $post_type_caps->delete_private_posts ); } // Allow editing other's posts if ( isset( $_POST[ $post_role.'-edit-others' ] ) && $_POST[ $post_role.'-edit-others' ] == 'on' ) { $role->add_cap( $post_type_caps->edit_others_posts ); $role->add_cap( $post_type_caps->delete_others_posts ); } else { $role->remove_cap( $post_type_caps->edit_others_posts ); $role->remove_cap( $post_type_caps->delete_others_posts ); } // Allow reading private if ( isset( $_POST[ $post_role.'-private' ] ) && $_POST[ $post_role.'-private' ] == 'on' ) $role->add_cap( $post_type_caps->read_private_posts); else $role->remove_cap( $post_type_caps->read_private_posts ); } } $location = admin_url( 'options-general.php?page=mapcap&updated=1' ); wp_safe_redirect( $location ); exit; } add_action( 'admin_init', 'mc_save_capabilities' ); /** * If a post type has been registered without setting map meta cap to true, Map Cap offers * the end user a check box to attempt to force the post type to allow meta capability mapping. * * To force meta capability mapping, this function sets the map_meta_cap flag to true and * updates the post type's capabilities to use all primitive capabilities. **/ function mc_force_map_meta_cap() { global $wp_post_types; $force_map_types = get_option( 'mc_force_map_meta_cap', array() ); foreach( $force_map_types as $post_type => $force_mapping ) { if ( ! isset( $wp_post_types[$post_type] ) ) continue; // Set the post type to map meta capabilities $wp_post_types[$post_type]->map_meta_cap = $force_mapping; // Spoof a capabilities array for the get_post_type_capabilities function $wp_post_types[$post_type]->capabilities = array(); foreach( $wp_post_types[$post_type]->cap as $key => $cap ) $wp_post_types[$post_type]->capabilities[$key] = $cap; // Update the post type's capabilities to include the primitive capabilities required by map_meta_cap $wp_post_types[$post_type]->cap = get_post_type_capabilities( $wp_post_types[$post_type] ); // Remove the spoofed capabilities array unset($wp_post_types[$post_type]->capabilities); } } add_action( 'init', 'mc_force_map_meta_cap', 10000 ); /** * If a post author doesn't have permission to edit their own custom post types, they are redirected * to the post.php page, but what if they don't have permission to edit vanilla posts? WP Breaks. * * This is a bit cludgy, so this function redirects them to that post type's admin index page and adds * a message to show post was published. */ function mc_post_access_denied_redirect() { global $pagenow; if( $pagenow == 'edit.php' ) { // @TODO find a way to determine this with better specificity wp_redirect( add_query_arg( array( 'updated' => 1 ), admin_url( 'index.php' ) ) ); exit; } } add_action( 'admin_page_access_denied', 'mc_post_access_denied_redirect', 20 ); //run after other functions