feat: VivesPOS landing on Winter CMS 1.2 — theme + plugin + Dockerfile

- Base: wintercms/winter branch 1.2 (full framework)
- Theme vivespos: Canvas 7 + Bootstrap 5 CDN, custom CSS
- Layout: deferred GTM/GA4 tracking, JSON-LD SoftwareApplication
- Partials: hero (offline-first), features, modes (offline/nube toggle),
  screenshots, pricing (3 planes), comparison, FAQ, CTA
- Plugin VivesPOS.Site with ContactForm
- Dockerfile: PHP 8.2 Apache, port 80, healthcheck
- Added winter/wn-pages, blog, sitemap, seo plugins
- Active theme set to vivespos

modules/backend/formwidgets/PermissionEditor.php

@@ -0,0 +1,171 @@
+<?php namespace Backend\FormWidgets;
+
+use Backend\Classes\FormWidgetBase;
+use BackendAuth;
+
+/**
+ * User/group permission editor
+ * This widget is used by the system internally on the System / Administrators pages.
+ *
+ * Available Modes:
+ * - radio: Default mode, used by user-level permissions.
+ *   Provides three-state control over each available permission. States are
+ *      -1: Explicitly deny the permission
+ *      0: Inherit the permission's value from a parent source (User inherits from Role)
+ *      1: Explicitly grant the permission
+ * - checkbox: Used to define permissions for roles. Intended to define a base of what permissions are available
+ *   Provides two state control over each available permission. States are
+ *      1: Explicitly allow the permission
+ *      null: If the checkbox is not ticked, the permission will not be sent to the server and will not be stored.
+ *      This is interpreted as the permission not being present and thus not allowed
+ * - switch: Used to define overriding permissions in a simpler UX than the radio.
+ *   Provides two state control over each available permission. States are
+ *      1: Explicitly allow the permission
+ *      -1: Explicitly deny the permission
+ *
+ * Available permissions can be defined in the form of an array of permission codes to allow:
+ * NOTE: Users are still not allowed to modify permissions that they themselves do not have access to
+ *     availablePermissions: ['some.author.permission', 'some.other.permission', 'etc.some.system.permission']
+ *
+ * @package winter\wn-backend-module
+ * @author Alexey Bobkov, Samuel Georges
+ */
+class PermissionEditor extends FormWidgetBase
+{
+    protected $user;
+
+    /**
+     * @var string Mode to display the permission editor with. Available options: radio, checkbox, switch
+     */
+    public $mode = 'radio';
+
+    /**
+     * @var array Permission codes to allow to be interacted with through this widget
+     */
+    public $availablePermissions;
+
+    /**
+     * @inheritDoc
+     */
+    public function init()
+    {
+        $this->fillFromConfig([
+            'mode',
+            'availablePermissions',
+        ]);
+
+        $this->user = BackendAuth::getUser();
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function render()
+    {
+        $this->prepareVars();
+        return $this->makePartial('permissioneditor');
+    }
+
+    /**
+     * Prepares the list data
+     */
+    public function prepareVars()
+    {
+        if ($this->formField->disabled) {
+            $this->previewMode = true;
+        }
+
+        $permissionsData = $this->formField->getValueFromData($this->model);
+        if (!is_array($permissionsData)) {
+            $permissionsData = [];
+        }
+
+        $this->vars['mode'] = $this->mode;
+        $this->vars['permissions'] = $this->getFilteredPermissions();
+        $this->vars['baseFieldName'] = $this->getFieldName();
+        $this->vars['permissionsData'] = $permissionsData;
+        $this->vars['field'] = $this->formField;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function getSaveValue($value)
+    {
+        if ($this->user->isSuperUser()) {
+            return is_array($value) ? $value : [];
+        }
+
+        return $this->getSaveValueSecure($value);
+    }
+
+    /**
+     * @inheritDoc
+     */
+    protected function loadAssets()
+    {
+        $this->addCss('css/permissioneditor.css', 'core');
+        $this->addJs('js/permissioneditor.js', 'core');
+    }
+
+    /**
+     * Returns a safely parsed set of permissions, ensuring the user cannot elevate
+     * their own permissions or permissions of another user above their own.
+     *
+     * @param string $value
+     * @return array
+     */
+    protected function getSaveValueSecure($value)
+    {
+        $newPermissions = is_array($value) ? array_map('intval', $value) : [];
+
+        if (!empty($newPermissions)) {
+            $existingPermissions = $this->model->permissions ?: [];
+
+            $allowedPermissions = array_map(function ($permissionObject) {
+                return $permissionObject->code;
+            }, array_flatten($this->getFilteredPermissions()));
+
+            foreach ($newPermissions as $permission => $code) {
+                if (in_array($permission, $allowedPermissions)) {
+                    $existingPermissions[$permission] = $code;
+                }
+            }
+
+            $newPermissions = $existingPermissions;
+        }
+
+        return $newPermissions;
+    }
+
+    /**
+     * Returns the available permissions; removing those that the logged-in user does not have access to
+     *
+     * @return array The permissions that the logged-in user does have access to ['permission-tab' => $arrayOfAllowedPermissionObjects]
+     */
+    protected function getFilteredPermissions()
+    {
+        $permissions = BackendAuth::listTabbedPermissions();
+
+        foreach ($permissions as $tab => $permissionsArray) {
+            foreach ($permissionsArray as $index => $permission) {
+                if (!$this->user->hasAccess($permission->code) ||
+                    (
+                        is_array($this->availablePermissions) &&
+                        !in_array($permission->code, $this->availablePermissions)
+                    )) {
+                    unset($permissionsArray[$index]);
+                }
+            }
+
+            if (empty($permissionsArray)) {
+                unset($permissions[$tab]);
+            }
+            else {
+                $permissions[$tab] = $permissionsArray;
+            }
+        }
+
+        return $permissions;
+    }
+}