<?php

/**
 * Media Library Access Control module.
 *
 * @package ASENHA
 * @since 8.2.4
 */
namespace ASENHA\Classes;

// Exit if accessed directly.
if ( !defined( 'ABSPATH' ) ) {
    exit;
}
/**
 * Restrict Media Library/media modal attachment listings to the current user's uploads.
 *
 * Notes:
 * - Restricts only attachment *listing* queries in wp-admin (Media Library list view and media modal/grid queries).
 * - Does not affect frontend rendering, and does not block direct access to attachment URLs.
 */
class Media_Files_Visibility_Control {
    /**
     * Filter attachment query args for media modal / media grid.
     *
     * @param array $query_args WP_Query args for attachments.
     * @return array
     */
    public function filter_attachments_grid( $query_args ) {
        if ( !is_admin() ) {
            return $query_args;
        }
        if ( !$this->should_restrict_current_user() ) {
            return $query_args;
        }
        $query_args['author'] = get_current_user_id();
        return $query_args;
    }

    /**
     * Restrict attachment list view in Media Library (`upload.php` list mode).
     *
     * @param \WP_Query $query Query instance.
     * @return void
     */
    public function filter_attachments_list( $query ) {
        if ( !is_admin() ) {
            return;
        }
        if ( !$query instanceof \WP_Query ) {
            return;
        }
        if ( !$query->is_main_query() ) {
            return;
        }
        // Only affect Media Library list screen.
        global $pagenow;
        if ( 'upload.php' !== $pagenow ) {
            return;
        }
        $post_type = $query->get( 'post_type' );
        if ( 'attachment' !== $post_type && (!is_array( $post_type ) || !in_array( 'attachment', $post_type, true )) ) {
            return;
        }
        if ( !$this->should_restrict_current_user() ) {
            return;
        }
        $query->set( 'author', get_current_user_id() );
    }

    /**
     * Determine whether the current user should be restricted to seeing only their own uploads.
     *
     * @return bool
     */
    private function should_restrict_current_user() {
        if ( !is_user_logged_in() ) {
            return false;
        }
        // Administrators (and multisite super admins) can always see all media.
        if ( current_user_can( 'manage_options' ) ) {
            return false;
        }
        if ( is_multisite() && is_super_admin() ) {
            return false;
        }
        // Only apply when the user can upload files (i.e., they are a relevant role for media).
        if ( !current_user_can( 'upload_files' ) ) {
            return false;
        }
        // Free behavior: restrict all non-admin upload-capable users.
        $should_restrict = true;
        return (bool) $should_restrict;
    }

}