Changeset 8942 for trunk/src/bp-core/bp-core-caps.php

Timestamp:

08/18/2014 01:15:40 PM (10 years ago)

Author:

johnjamesjacoby

Message:

Improvements to Blogs & capabilities:

• Introduce bp_blogs_get_allowed_roles() to act as a blog-role whitelist
• Introduce bp_get_current_blog_roles() to avoid including an admin-only file theme-side
• Use these functions to clean-up the add_user_to_blog process in several ways:

More accurately match the member-to-blog relationship specification
No-subscriber users remains functionality intact
Allow extending of existing user-to-blog behavior

See #5749, #5819.

File:

• trunk/src/bp-core/bp-core-caps.php (modified) (1 diff)

trunk/src/bp-core/bp-core-caps.php

@@ -10 +10 @@
 // Exit if accessed directly
 if ( !defined( 'ABSPATH' ) ) exit;
+
+/**
+ * Return an array of roles from the currently loaded blog
+ *
+ * WordPress roles are dynamically flipped when calls to switch_to_blog() and
+ * restore_current_blog() are made, so we use and trust WordPress core to have
+ * loaded the correct results for us here. As enhancements are made to
+ * WordPresss's RBAC, so should our capability functions here.
+ *
+ * @since BuddyPress (2.1.0)
+ *
+ * @return array
+ */
+function bp_get_current_blog_roles() {
+    global $wp_roles;
+
+    // Sanity check on roles global variable
+    $roles = isset( $wp_roles->roles )
+        ? $wp_roles->roles
+        : array();
+
+    // Apply WordPress core filter to editable roles
+    $roles = apply_filters( 'editable_roles', $roles );
+
+    // Return the editable roles
+    return apply_filters( 'bp_get_current_blog_roles', $roles, $wp_roles );
+}
 
 /**