Changeset 11806 for trunk/src/bp-activity/bp-activity-functions.php

Timestamp:

01/10/2018 06:59:00 PM (7 years ago)

Author:

djpaul

Message:

Activity: add function to check if a user has access to a single activity.

This change extracts the existing logic from bp_activity_screen_single_activity_permalink() into a new function, allowing it to be used in multiple places, such as the REST API, or a WP-CLI extension.

Fixes #7048

Props espellcaste

File:

• trunk/src/bp-activity/bp-activity-functions.php (modified) (1 diff)

trunk/src/bp-activity/bp-activity-functions.php

@@ -3082 +3082 @@
 
 /**
+ * Can a user see a particular activity item?
+ *
+ * @since 3.0.0
+ *
+ * @param  BP_Activity_Activity $activity Activity object.
+ * @param  integer              $user_id  User ID.
+ * @return boolean True on success, false on failure.
+ */
+function bp_activity_user_can_read( $activity, $user_id = 0 ) {
+    $retval = false;
+
+    // Fallback.
+    if ( empty( $user_id ) ) {
+        $user_id = bp_loggedin_user_id();
+    }
+
+    // Admins and moderators can see everything.
+    if ( bp_current_user_can( 'bp_moderate' ) ) {
+        $retval = true;
+    }
+
+    // If activity author match user, allow access as well.
+    if ( $user_id === $activity->user_id ) {
+        $retval = true;
+    }
+
+    // If activity is from a group, do an extra cap check.
+    if ( ! $retval && bp_is_active( 'groups' ) && $activity->component === buddypress()->groups->id ) {
+
+        // Check to see if the user has access to the activity's parent group.
+        $group = groups_get_group( $activity->item_id );
+        if ( $group ) {
+            $retval = $group->user_has_access;
+        }
+    }
+
+    /**
+     * Filters whether the current user has access to an activity item.
+     *
+     * @since 3.0.0
+     *
+     * @param bool                 $retval   Return value.
+     * @param int                  $user_id  Current user ID.
+     * @param BP_Activity_Activity $activity Activity object.
+     */
+    return apply_filters( 'bp_activity_user_can_read', $retval, $user_id, $activity );
+}
+
+/**
  * Hide a user's activity.
  *