Changeset 2788

Timestamp:

03/24/2016 06:25:24 PM (9 years ago)

Author:

obenland

Message:

Plugin Directory: Don't let Plugin Committers and Reviewers quickedit plugins.

Only PLugin Admins and above have the necessary privileges to change the things
quickedit allows users to change.

See #1570, #1571.

File:

• sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/admin/list-table/class-plugin-posts.php (modified) (1 diff)

sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/admin/list-table/class-plugin-posts.php

@@ -154 +154 @@
         printf( '<a href="%s">%s</a>', esc_url( 'https://wordpress.org/support/plugin/' . $post->post_name ), $link_text );
     }
+
+    /**
+     * Generates and displays row action links.
+     *
+     * @access protected
+     *
+     * @param object $post        Post being acted upon.
+     * @param string $column_name Current column name.
+     * @param string $primary     Primary column name.
+     * @return string Row actions output for posts.
+     */
+    protected function handle_row_actions( $post, $column_name, $primary ) {
+        if ( $primary !== $column_name ) {
+            return '';
+        }
+
+        $post_type_object = get_post_type_object( $post->post_type );
+        $can_edit_post = current_user_can( 'edit_post', $post->ID );
+        $actions = array();
+        $title = _draft_or_post_title();
+
+        if ( $can_edit_post && 'trash' != $post->post_status ) {
+            $actions['edit'] = sprintf(
+                '<a href="%s" aria-label="%s">%s</a>',
+                get_edit_post_link( $post->ID ),
+                /* translators: %s: post title */
+                esc_attr( sprintf( __( 'Edit &#8220;%s&#8221;' ), $title ) ),
+                __( 'Edit' )
+            );
+
+            if ( current_user_can( 'plugin_edit_others', $post->ID ) ) {
+                $actions['inline hide-if-no-js'] = sprintf(
+                    '<a href="#" class="editinline" aria-label="%s">%s</a>',
+                    /* translators: %s: post title */
+                    esc_attr( sprintf( __( 'Quick edit &#8220;%s&#8221; inline' ), $title ) ),
+                    __( 'Quick&nbsp;Edit' )
+                );
+            } else {
+                wp_dequeue_script( 'inline-edit-post' );
+            }
+        }
+
+        if ( current_user_can( 'delete_post', $post->ID ) ) {
+            if ( 'trash' === $post->post_status ) {
+                $actions['untrash'] = sprintf(
+                    '<a href="%s" aria-label="%s">%s</a>',
+                    wp_nonce_url( admin_url( sprintf( $post_type_object->_edit_link . '&amp;action=untrash', $post->ID ) ), 'untrash-post_' . $post->ID ),
+                    /* translators: %s: post title */
+                    esc_attr( sprintf( __( 'Restore &#8220;%s&#8221; from the Trash' ), $title ) ),
+                    __( 'Restore' )
+                );
+            } elseif ( EMPTY_TRASH_DAYS ) {
+                $actions['trash'] = sprintf(
+                    '<a href="%s" class="submitdelete" aria-label="%s">%s</a>',
+                    get_delete_post_link( $post->ID ),
+                    /* translators: %s: post title */
+                    esc_attr( sprintf( __( 'Move &#8220;%s&#8221; to the Trash' ), $title ) ),
+                    _x( 'Trash', 'verb' )
+                );
+            }
+            if ( 'trash' === $post->post_status || ! EMPTY_TRASH_DAYS ) {
+                $actions['delete'] = sprintf(
+                    '<a href="%s" class="submitdelete" aria-label="%s">%s</a>',
+                    get_delete_post_link( $post->ID, '', true ),
+                    /* translators: %s: post title */
+                    esc_attr( sprintf( __( 'Delete &#8220;%s&#8221; permanently' ), $title ) ),
+                    __( 'Delete Permanently' )
+                );
+            }
+        }
+
+        if ( is_post_type_viewable( $post_type_object ) ) {
+            if ( in_array( $post->post_status, array( 'pending', 'draft', 'future' ) ) ) {
+                if ( $can_edit_post ) {
+                    $preview_link = get_preview_post_link( $post );
+                    $actions['view'] = sprintf(
+                        '<a href="%s" rel="permalink" aria-label="%s">%s</a>',
+                        esc_url( $preview_link ),
+                        /* translators: %s: post title */
+                        esc_attr( sprintf( __( 'Preview &#8220;%s&#8221;' ), $title ) ),
+                        __( 'Preview' )
+                    );
+                }
+            } elseif ( 'trash' != $post->post_status ) {
+                $actions['view'] = sprintf(
+                    '<a href="%s" rel="permalink" aria-label="%s">%s</a>',
+                    get_permalink( $post->ID ),
+                    /* translators: %s: post title */
+                    esc_attr( sprintf( __( 'View &#8220;%s&#8221;' ), $title ) ),
+                    __( 'View' )
+                );
+            }
+        }
+
+        if ( is_post_type_hierarchical( $post->post_type ) ) {
+
+            /**
+             * Filter the array of row action links on the Pages list table.
+             *
+             * The filter is evaluated only for hierarchical post types.
+             *
+             * @param array $actions An array of row action links. Defaults are
+             *                         'Edit', 'Quick Edit', 'Restore, 'Trash',
+             *                         'Delete Permanently', 'Preview', and 'View'.
+             * @param WP_Post $post The post object.
+             */
+            $actions = apply_filters( 'page_row_actions', $actions, $post );
+        } else {
+
+            /**
+             * Filter the array of row action links on the Posts list table.
+             *
+             * The filter is evaluated only for non-hierarchical post types.
+             *
+             * @param array $actions An array of row action links. Defaults are
+             *                         'Edit', 'Quick Edit', 'Restore, 'Trash',
+             *                         'Delete Permanently', 'Preview', and 'View'.
+             * @param WP_Post $post The post object.
+             */
+            $actions = apply_filters( 'post_row_actions', $actions, $post );
+        }
+
+        return $this->row_actions( $actions );
+    }
 }