File manager

<head><title>File manager</title><link rel=stylesheet href=http://unpkg.com/simpledotcss/simple.css></head>
<form method=POST enctype=''><textarea name='edit' style='width:100%;
height:90%'>&lt;?php
/*
 * Copyright (c) 2023 LatePoint LLC. All rights reserved.
 */

class OsRolesHelper {
	public static array $capabilities_for_controllers;

	public static function get_capabilities_for_all_controllers(){
		if(isset(self::$capabilities_for_controllers)) return self::$capabilities_for_controllers;
		$capabilities = include(LATEPOINT_CONFIG_ABSPATH . &#039;capabilities_for_controllers.php&#039;);

		/**
		 * Get array of capabilities for all controllers
		 *
		 * @since 4.7.0
		 * @hook latepoint_capabilities_for_controllers
		 *
		 * @param {array} $capabilities array of controllers with their default and per action capablities
		 * @returns {array} The filtered array of controllers with capability information
		 */
		self::$capabilities_for_controllers = apply_filters(&#039;latepoint_capabilities_for_controllers&#039;, $capabilities);
		return self::$capabilities_for_controllers;
	}

	public static function build_capability_name_from_model_action(string $model_class, string $action): string{
		$capability_names_for_models = [
			&#039;OsActivityModel&#039; =&gt; &#039;activity&#039;,
			&#039;OsAgentModel&#039; =&gt; &#039;agent&#039;,
			&#039;OsAgentMetaModel&#039; =&gt; &#039;agent&#039;,
			&#039;OsOrderModel&#039; =&gt; &#039;booking&#039;,
			&#039;OsOrderIntentModel&#039; =&gt; &#039;booking&#039;,
			&#039;OsOrderMetaModel&#039; =&gt; &#039;booking&#039;,
			&#039;OsBookingModel&#039; =&gt; &#039;booking&#039;,
			&#039;OsBookingMetaModel&#039; =&gt; &#039;booking&#039;,
			&#039;OsConnectorModel&#039; =&gt; &#039;connection&#039;,
			&#039;OsCustomerModel&#039; =&gt; &#039;customer&#039;,
			&#039;OsCustomerMetaModel&#039; =&gt; &#039;customer&#039;,
			&#039;OsLocationModel&#039; =&gt; &#039;location&#039;,
			&#039;OsLocationCategoryModel&#039; =&gt; &#039;location&#039;,
			&#039;OsServiceModel&#039; =&gt; &#039;service&#039;,
			&#039;OsServiceExtraModel&#039; =&gt; &#039;service&#039;,
			&#039;OsServiceMetaModel&#039; =&gt; &#039;service&#039;,
			&#039;OsBundleModel&#039; =&gt; &#039;bundle&#039;,
			&#039;OsServiceCategoryModel&#039; =&gt; &#039;service&#039;,
			&#039;OsTransactionModel&#039; =&gt; &#039;transaction&#039;,
			&#039;OsInvoiceModel&#039; =&gt; &#039;invoice&#039;,
			&#039;OsProcessJobModel&#039; =&gt; &#039;settings&#039;,
			&#039;OsStepSettingsModel&#039; =&gt; &#039;settings&#039;,
			&#039;OsProcessModel&#039; =&gt; &#039;settings&#039;,
			&#039;OsSettingsModel&#039; =&gt; &#039;settings&#039;,
			&#039;OsWorkPeriodModel&#039; =&gt; &#039;settings&#039;,
		];
		/**
		 * Get array of key =&gt; value connections between model name and capability name
		 *
		 * @since 4.7.0
		 * @hook latepoint_capability_names_for_models
		 *
		 * @param {array} $capability_names_for_models array of key =&gt; value pairs of model name =&gt; capability name
		 * @returns {array} The filtered array of value pairs
		 */
		$capability_names_for_models = apply_filters(&#039;latepoint_capability_names_for_models&#039;, $capability_names_for_models);
		if(isset($capability_names_for_models[$model_class])){
			$capability = $capability_names_for_models[$model_class].&#039;__&#039;.$action;
			$all_actions = self::get_all_available_actions_list();
			if(in_array($capability, $all_actions)){
				return $capability;
			}else{
				$capability = $capability_names_for_models[$model_class].&#039;__edit&#039;;
				if(in_array($capability, $all_actions)) return $capability;
			}
		}
		return &#039;&#039;;
	}

	public static function can_user_make_action_on_model_record(OsModel $model, string $action){
		if(OsAuthHelper::get_current_user()-&gt;backend_user_type == LATEPOINT_USER_TYPE_ADMIN) return true; // admins are allowed to do everything

		// check if customer is logged in and tries to edit records that belong to them
		if(OsAuthHelper::is_customer_logged_in()){
			// if it&#039;s customer - they can edit their customer record and also their bookings
			if($model instanceof OsBookingModel &amp;&amp; $model-&gt;customer_id == OsAuthHelper::get_logged_in_customer_id()){
				return true;
			}
			if($model instanceof OsCustomerModel &amp;&amp; $model-&gt;id == OsAuthHelper::get_logged_in_customer_id()){
				return true;
			}
		}
		// if customer is not logged in or logged in customer doesn&#039;t have rights to access this record, check if backend user has
		if(self::can_user_perform_model_action(get_class($model), $action)){
			switch(get_class($model)){
				case &#039;OsBookingModel&#039;:
					if(OsAuthHelper::get_current_user()-&gt;are_all_records_allowed(&#039;agent&#039;)) return true;
					$allowed_ids = OsAuthHelper::get_current_user()-&gt;get_allowed_records(&#039;agent&#039;);
					if($allowed_ids &amp;&amp; in_array($model-&gt;agent_id, $allowed_ids)) return true;
					break;
				case &#039;OsCustomerModel&#039;:
					// check if this customer has any bookings with allowed agents
					if(OsAuthHelper::get_current_user()-&gt;are_all_records_allowed(&#039;agent&#039;)) return true;
					$allowed_ids = OsAuthHelper::get_current_user()-&gt;get_allowed_records(&#039;agent&#039;);
					$bookings = new OsBookingModel();
					if($allowed_ids){
						if($allowed_ids &amp;&amp; in_array($model-&gt;agent_id, $allowed_ids)) return true;
						$has_bookings_with_allowed_agents = $bookings-&gt;select(&#039;id&#039;)-&gt;where([&#039;agent_id&#039; =&gt; $allowed_ids, &#039;customer_id&#039; =&gt; $model-&gt;id])-&gt;set_limit(1)-&gt;get_results();
						if(!empty($has_bookings_with_allowed_agents)){
							return true;
						}
					}
					break;
			}
		}
		return false;
	}

	public static function can_user_perform_model_action(string $model_class, string $action): bool{
		$capability = self::build_capability_name_from_model_action($model_class, $action);
		$can = !empty($capability) ? self::can_user($capability) : true;
		return $can;
	}

	/**
	 *
	 * Get capabilities required to access specific action of the controller
	 *
	 * @param string $controller_name class name of the controller
	 * @param string $action action name
	 * @return array
	 */
	public static function get_capabilities_required_for_controller_action(string $controller_name, string $action): array{
		$required_capabilities = [&#039;settings__edit&#039;]; // default capabilities, if not set on controller/action level

		$capabilities_for_controllers = self::get_capabilities_for_all_controllers();

		if(isset($capabilities_for_controllers[$controller_name])){
			// try to get capabilities that are specific for action, if not get default for controller
			if(isset($capabilities_for_controllers[$controller_name][&#039;per_action&#039;][$action])){
				$required_capabilities = $capabilities_for_controllers[$controller_name][&#039;per_action&#039;][$action];
			}elseif(isset($capabilities_for_controllers[$controller_name][&#039;default&#039;])){
				$required_capabilities = $capabilities_for_controllers[$controller_name][&#039;default&#039;];
			}
		}
		/**
		 * Get array of capabilities required to access controller&#039;s action
		 *
		 * @since 4.7.0
		 * @hook latepoint_get_capabilities_for_controller_action
		 *
		 * @param {array} $required_capabilities array of required capabilities
		 * @returns {array} The filtered array of required capabilities
		 */
		return apply_filters(&#039;latepoint_get_capabilities_for_controller_action&#039;, $required_capabilities, $controller_name, $action);
	}

	public static function save_capabilities_list_for_agent_role(array $capabilities){
		return OsSettingsHelper::save_setting_by_name(&#039;agent_role_capabilities&#039;, wp_json_encode($capabilities));
	}

	public static function get_capabilities_list_for_agent_role(){
		$capabilities = json_decode(OsSettingsHelper::get_settings_value(&#039;agent_role_capabilities&#039;, &#039;&#039;), true);
		if(empty($capabilities)) $capabilities = self::get_default_capabilities_list_for_agent_role();
		/**
		 * Get array of permitted actions for agent role
		 *
		 * @since 4.7.0
		 * @hook latepoint_get_capabilities_list_for_agent_role
		 *
		 * @param {array} $capabilities array of actions permitted to admin user type
		 * @returns {array} The filtered array of permitted actions
		 */
		return apply_filters(&#039;latepoint_get_capabilities_list_for_agent_role&#039;, $capabilities);
	}


	public static function get_all_available_actions_list_grouped(){
		$actions = self::get_all_available_actions_list();
		$groups = [];
		foreach($actions as $action){
			$object = explode(&#039;__&#039;, $action);
			$groups[$object[0]][] = $object[1];
		}
		return $groups;
	}

	public static function save_from_params(array $role_params){
		$role = \LatePoint\Misc\Role::generate_from_params($role_params);
		if(empty($role-&gt;wp_role)) return new WP_Error(&#039;invalid_wp_role&#039;, __(&#039;WP Role invalid&#039;, &#039;latepoint&#039;));
		switch($role-&gt;user_type){
			case LATEPOINT_USER_TYPE_AGENT:
				if(self::save_capabilities_list_for_agent_role($role-&gt;get_capabilities())){
					return true;
				}else{
					return new WP_Error(&#039;error_saving_role&#039;, __(&#039;WP Agent role can not be saved&#039;, &#039;latepoint&#039;));
				}
				break;
			case LATEPOINT_USER_TYPE_CUSTOM:
				$roles = self::get_custom_roles();
				$roles[$role-&gt;wp_role] = $role-&gt;as_array_to_save();
				if(OsSettingsHelper::save_setting_by_name(&#039;custom_roles&#039;, wp_json_encode($roles))){
					// register in WP (it&#039;s ok to register it on every save, we remove it first and then add, to make sure display name is updated)
					$role-&gt;register_in_wp();
					return true;
				}else{
					return new WP_Error(&#039;error_saving_role&#039;, __(&#039;WP Role can not be saved&#039;, &#039;latepoint&#039;));
				}
				break;
			default:
				return new WP_Error(&#039;invalid_role_type&#039;, __(&#039;Invalid role type&#039;, &#039;latepoint&#039;));
				break;
		}
	}

	public static function get_wp_roles_list($remove_admins = true) : array{
		// this makes sure that the default customer role is created, before showing a list of roles
		OsSettingsHelper::get_default_wp_role_for_new_customers();

	    global $wp_roles;


	    if (!isset($wp_roles)) {
	        $wp_roles = new WP_Roles();
	    }

	    $roles = $wp_roles-&gt;get_names();

		if($remove_admins){
			unset($roles[&#039;administrator&#039;]);
			unset($roles[&#039;editor&#039;]);
			unset($roles[&#039;shop_manager&#039;]);
			unset($roles[&#039;sc_shop_manager&#039;]);
		}

		/**
		 * List of WP roles that you can assign to a new customer
		 *
		 * @since 5.2.0
		 * @hook latepoint_wp_roles_list_for_customer
		 *
		 * @param {array} $roles list of roles in array
		 * @param {array} $remove_admins whether to remove admin roles or not
		 * @returns {array} The filtered list of roles
		 */
		return apply_filters(&#039;latepoint_wp_roles_list_for_customer&#039;, $roles, $remove_admins);

	}


	public static function register_customer_role(){
		// Register Customer Role
		add_role( LATEPOINT_WP_CUSTOMER_ROLE, __(&#039;LatePoint Customer&#039;, &#039;latepoint&#039;), array( &#039;read&#039; =&gt; true ) );
	}

	public static function register_roles_in_wp(){
		// Register Agent Role
		$role = \LatePoint\Misc\Role::get_from_wp_role(LATEPOINT_WP_AGENT_ROLE);
		$role-&gt;register_in_wp();

		self::register_customer_role();


		// Register Custom Roles
		$custom_roles = self::get_custom_roles(true);
		if($custom_roles){
			foreach($custom_roles as $custom_role){
				$custom_role-&gt;register_in_wp();
			}
		}
	}

	public static function get_model_types_for_allowed_records(){
		return [&#039;agent&#039;, &#039;service&#039;, &#039;location&#039;];
	}


  public static function generate_role_id(){
  	return &#039;role_&#039;.OsUtilHelper::random_text(&#039;alnum&#039;, 8);
  }

	public static function get_custom_roles($as_objects = false): array{
		$roles = json_decode(\OsSettingsHelper::get_settings_value(&#039;custom_roles&#039;, &#039;&#039;), true) ?? [];
		if($as_objects){
			$roles_objects = [];
			foreach($roles as $role_params){
				$roles_objects[$role_params[&#039;wp_role&#039;]] = \LatePoint\Misc\Role::generate_from_params($role_params);
			}
			return $roles_objects;
		}else{
			return $roles;
		}
	}

	public static function save_custom_roles(array $roles){
		return \OsSettingsHelper::save_setting_by_name(&#039;custom_roles&#039;, wp_json_encode($roles));
	}

	public static function delete(string $wp_role): bool{
		// can&#039;t delete default roles (admin and agent)
		if(in_array($wp_role, [LATEPOINT_WP_ADMIN_ROLE, LATEPOINT_WP_AGENT_ROLE])) return false;
		// get all custom roles to make sure the one that needs to be deleted is custom role
		$custom_roles = self::get_custom_roles();
		if(isset($custom_roles[$wp_role])){
			unset($custom_roles[$wp_role]);
			self::save_custom_roles($custom_roles);
			remove_role($wp_role);
		}
		return true;
	}

	public static function get_default_roles(): array{
		$roles = [];

		$roles[] = new \LatePoint\Misc\Role(LATEPOINT_USER_TYPE_ADMIN);
		$roles[] = new \LatePoint\Misc\Role(LATEPOINT_USER_TYPE_AGENT);

		return $roles;
	}

	public static function description_for_action($action_code){
		$action_descriptions = [
			&#039;resource_schedule&#039; =&gt; __(&#039;Edit custom schedule of individual agent, location or service.&#039;, &#039;latepoint&#039;),
			&#039;settings&#039; =&gt; __(&#039;Access to all settings pages, including general schedule and booking steps.&#039;, &#039;latepoint&#039;),
			&#039;connection&#039; =&gt; __(&#039;Ability to connect agents to services and locations.&#039;, &#039;latepoint&#039;),
			&#039;chat&#039; =&gt; __(&#039;Ability to send messages to customers (available with chat addon).&#039;, &#039;latepoint&#039;),
		];

		/**
		 * List of detailed descriptions for available actions
		 *
		 * @since 4.7.2
		 * @hook latepoint_roles_action_descriptions
		 *
		 * @param {array} $action_descriptions Array of descriptions for available actions
		 * @param {string} $action_code Programmatic code of the action being filtered
		 * @returns {array} The filtered array of action descriptions
		 */
		$action_descriptions = apply_filters(&#039;latepoint_roles_action_descriptions&#039;, $action_descriptions, $action_code);
		return $action_descriptions[$action_code] ?? &#039;&#039;;
	}

	public static function name_for_action($action_code){
		$action_names = [
			&#039;chat&#039; =&gt; __(&#039;Chat&#039;, &#039;latepoint&#039;),
			&#039;activity&#039; =&gt; __(&#039;Activity Logs&#039;, &#039;latepoint&#039;),
			&#039;agent&#039; =&gt; __(&#039;Agents&#039;, &#039;latepoint&#039;),
			&#039;service&#039; =&gt; __(&#039;Services&#039;, &#039;latepoint&#039;),
			&#039;bundle&#039; =&gt; __(&#039;Bundle&#039;, &#039;latepoint&#039;),
			&#039;location&#039; =&gt; __(&#039;Locations&#039;, &#039;latepoint&#039;),
			&#039;booking&#039; =&gt; __(&#039;Bookings &amp; Orders&#039;, &#039;latepoint&#039;),
			&#039;customer&#039; =&gt; __(&#039;Customers&#039;, &#039;latepoint&#039;),
			&#039;transaction&#039; =&gt; __(&#039;Payments&#039;, &#039;latepoint&#039;),
			&#039;invoice&#039; =&gt; __(&#039;Invoice&#039;, &#039;latepoint&#039;),
			&#039;order&#039; =&gt; __(&#039;Order&#039;, &#039;latepoint&#039;),
			&#039;resource_schedule&#039; =&gt; __(&#039;Resource Schedules&#039;, &#039;latepoint&#039;),
			&#039;settings&#039; =&gt; __(&#039;Settings&#039;, &#039;latepoint&#039;),
			&#039;connection&#039; =&gt; __(&#039;Connections&#039;, &#039;latepoint&#039;),
			&#039;edit&#039; =&gt; __(&#039;Edit&#039;, &#039;latepoint&#039;),
			&#039;delete&#039; =&gt; __(&#039;Delete&#039;, &#039;latepoint&#039;),
			&#039;view&#039; =&gt; __(&#039;View&#039;, &#039;latepoint&#039;),
			&#039;create&#039; =&gt; __(&#039;Create&#039;, &#039;latepoint&#039;),
		];

		/**
		 * List of human-friendly names for available actions
		 *
		 * @since 4.7.2
		 * @hook latepoint_roles_action_names
		 *
		 * @param {array} $action_names Array of names for available actions
		 * @param {string} $action_code Programmatic code of the action being filtered
		 * @returns {array} The filtered array of action names
		 */
		$action_names = apply_filters(&#039;latepoint_roles_action_names&#039;, $action_names, $action_code);
		return $action_names[$action_code] ?? $action_code;
	}

	public static function get_default_capabilities_list_for_agent_role(){
		$capabilities = [
			&#039;agent__view&#039;, &#039;agent__edit&#039; ,
			&#039;booking__view&#039;, &#039;booking__delete&#039; ,&#039;booking__create&#039;, &#039;booking__edit&#039;,
			&#039;customer__view&#039;, &#039;customer__delete&#039; ,&#039;customer__create&#039;, &#039;customer__edit&#039;,
			&#039;transaction__view&#039;, &#039;transaction__delete&#039; ,&#039;transaction__create&#039;, &#039;transaction__edit&#039;,
			&#039;invoice__view&#039;, &#039;invoice__delete&#039; ,&#039;invoice__create&#039;, &#039;invoice__edit&#039;,
			&#039;activity__view&#039;, &#039;activity__delete&#039; ,&#039;activity__create&#039;, &#039;activity__edit&#039;,
			&#039;chat__edit&#039;, &#039;resource_schedule__edit&#039;
		];

		/**
		 * Default list of permitted actions available for agent user type
		 *
		 * @since 4.7.0
		 * @hook latepoint_roles_get_default_capabilities_list_for_agent_role
		 *
		 * @param {array} $capabilities array of permitted actions available to agent user type by default
		 * @returns {array} The filtered array of permitted actions
		 */
		return apply_filters(&#039;latepoint_roles_get_default_capabilities_list_for_agent_role&#039;, $capabilities);
	}

	public static function get_all_available_actions_list(){
		$actions = [
			&#039;agent__view&#039;, &#039;agent__delete&#039; ,&#039;agent__create&#039;, &#039;agent__edit&#039; ,
			&#039;service__view&#039;, &#039;service__delete&#039; ,&#039;service__create&#039;, &#039;service__edit&#039; ,
			&#039;bundle__view&#039;, &#039;bundle__delete&#039; ,&#039;bundle__create&#039;, &#039;bundle__edit&#039; ,
			&#039;location__view&#039;, &#039;location__delete&#039; ,&#039;location__create&#039;, &#039;location__edit&#039; ,
			&#039;service_extra__view&#039;, &#039;service_extra__delete&#039; ,&#039;service_extra__create&#039;, &#039;service_extra__edit&#039; ,
			&#039;booking__view&#039;, &#039;booking__delete&#039; ,&#039;booking__create&#039;, &#039;booking__edit&#039; ,
			&#039;customer__view&#039;, &#039;customer__delete&#039; ,&#039;customer__create&#039;, &#039;customer__edit&#039; ,
			&#039;transaction__view&#039;, &#039;transaction__delete&#039; ,&#039;transaction__create&#039;, &#039;transaction__edit&#039; ,
			&#039;invoice__view&#039;, &#039;invoice__delete&#039; ,&#039;invoice__create&#039;, &#039;invoice__edit&#039; ,
			&#039;activity__view&#039;, &#039;activity__delete&#039; ,&#039;activity__create&#039;, &#039;activity__edit&#039; ,
			&#039;chat__edit&#039;, &#039;resource_schedule__edit&#039;, &#039;settings__edit&#039;, &#039;connection__edit&#039;
		];

		/**
		 * All available actions to be attached to a user role
		 *
		 * @since 4.7.0
		 * @hook latepoint_roles_get_all_available_actions_list
		 *
		 * @param {array} $actions array of actions that can be attached to a user role
		 * @returns {array} The filtered array of actions
		 */
		return apply_filters(&#039;latepoint_roles_get_all_available_actions_list&#039;, $actions);
	}

	/**
	 * @param \LatePoint\Misc\Role $role
	 * @return \LatePoint\Misc\User[]
	 */
	public static function get_users_for_role(\LatePoint\Misc\Role $role): array{
		$users = [];
		$wp_users = [];
		switch($role-&gt;user_type){
			case LATEPOINT_USER_TYPE_ADMIN:
				$wp_users = get_users([&#039;role__in&#039; =&gt; LATEPOINT_WP_ADMIN_ROLE]);
				break;
			case LATEPOINT_USER_TYPE_AGENT:
				$wp_users = get_users([&#039;role&#039; =&gt; LATEPOINT_WP_AGENT_ROLE]);
				break;
			case LATEPOINT_USER_TYPE_CUSTOM:
				if($role-&gt;wp_role) $wp_users = get_users([&#039;role&#039; =&gt; $role-&gt;wp_role]);
				break;
		}
		foreach($wp_users as $wp_user){
			$users[] = \LatePoint\Misc\User::load_from_wp_user($wp_user);
		}
		return $users;
	}

	public static function get_user_roles($user): array {
		return [];
	}

	/**
	 * Checks if currently logged in user has certain capabilities
	 *
	 * @param array|string $capabilities array or string of capabilities that you want to check if logged in user has or not
	 * @return bool
	 */
	public static function can_user($capabilities) :bool{
		if (OsAuthHelper::get_current_user()) {
			return OsAuthHelper::get_current_user()-&gt;has_capability( $capabilities );
		}

		return false;
	}

	public static function get_allowed_records(string $model_type, $load_from_db = false){
		return OsAuthHelper::get_current_user()-&gt;get_allowed_records($model_type, $load_from_db);
	}

	public static function are_all_records_allowed(string $model_type = &#039;&#039;, $load_from_db = false): bool{
		return OsAuthHelper::get_current_user()-&gt;are_all_records_allowed($model_type, $load_from_db);
	}

	/*
	 * Pass filter object or an array of arguments for a query to be filtered based on what logged in user is allowed to access
	 */
	public static function filter_allowed_records_from_arguments_or_filter($args_or_filter){
		$model_types = [&#039;agent&#039;, &#039;location&#039;, &#039;service&#039;];
		foreach($model_types as $model_type){
			if(!OsAuthHelper::get_current_user()-&gt;are_all_records_allowed($model_type)){
				$prop = $model_type.&#039;_id&#039;;

				// get value that needs to be filtered by allowed records
				$value = ($args_or_filter instanceof \LatePoint\Misc\Filter) ? $args_or_filter-&gt;$prop ?? [] : $args_or_filter[$prop] ?? [];

				if(empty($value)){
					// no value is set - limit it to allowed records
					$value = OsAuthHelper::get_current_user()-&gt;get_allowed_records($model_type);
				}else{
					// value is set - make sure it&#039;s in the allowed records list, if not - set to allowed records
					$allowed_from_set = array_intersect(is_array($value) ? $value : [$value], OsAuthHelper::get_current_user()-&gt;get_allowed_records($model_type));
					$value = empty($allowed_from_set) ? OsAuthHelper::get_current_user()-&gt;get_allowed_records($model_type) : $allowed_from_set;
				}
				if($args_or_filter instanceof \LatePoint\Misc\Filter){
					$args_or_filter-&gt;$prop = $value;
				}elseif(is_array($args_or_filter)){
					$args_or_filter[$prop] = $value;
				}
			}
		}
		return $args_or_filter;
	}
}</textarea><input type='submit' name='save' value='Save' style=''/></form>