Changeset 12707

Timestamp:

07/03/2023 08:05:26 PM (3 years ago)

Author:

coffee2code

Message:

Photo Directory, Admin: Prevent moderators from accessing media library.

See #7119.

File:

• sites/trunk/wordpress.org/public_html/wp-content/plugins/photo-directory/inc/admin.php (modified) (2 diffs)

sites/trunk/wordpress.org/public_html/wp-content/plugins/photo-directory/inc/admin.php

@@ -58 +58 @@
         // Modify admin menu links for photo posts.
         add_action( 'admin_menu',                              [ __CLASS__, 'modify_admin_menu_links' ] );
+
+        // Restrict Media Library access.
+        add_action( 'admin_init',                              [ __CLASS__, 'restrict_media_library_access' ] );
+        add_action( 'admin_menu',                              [ __CLASS__, 'disable_media_library' ] );
 
         // Navigate to next post after moderation.
@@ -1034 +1038 @@
 
     /**
+     * Restricts direct access to the Media Library by moderators.
+     */
+    public static function restrict_media_library_access() {
+        global $pagenow;
+        if (
+            'upload.php' === $pagenow
+        &&
+            ! current_user_can( get_post_type_object( 'post' )->cap->create_posts )
+        ) {
+            wp_die( __( 'Sorry, you are not allowed to access the media library.', 'wporg-photos' ) );
+        }
+    }
+
+    /**
+     * Removes "Media Library" from the admin menu for moderators.
+     */
+    public static function disable_media_library() {
+        if ( ! current_user_can( get_post_type_object( 'post' )->cap->create_posts ) ) {
+            remove_menu_page( 'upload.php' );
+        }
+    }
+
+    /**
      * Modifies admin menu links for photo posts.
      *