feat(users): govern profiles and access

Normalize fixed profile fields, profile actions, and the five-column capability matrix for comments, uploads, and downloads.

templates/parts/submit/editor-main.php

@@ -44,14 +44,11 @@ $is_can_new = !empty($ctx['is_can_new']);
 				<?php
 				$toolbar1 = 'formatselect,bold,italic,bullist,numlist,alignleft,aligncenter,alignright,link,blockquote,code,fullscreen';
 				$plugins  = 'paste,link,lists,fullscreen,wordpress,wplink,charmap';
-				if (!empty($ctx['can_upload_img']) || !empty($ctx['can_upload_video']) || !empty($ctx['can_upload_file'])) {
-					// media_buttons handle uploads; keep toolbar clean.
-				}
 				$editor_settings = [
 					'textarea_name'  => 'post_content',
 					'textarea_rows'  => 20,
 					'editor_height'  => wp_is_mobile() ? 460 : 470,
-					'media_buttons'  => !empty($ctx['can_upload_img']) || !empty($ctx['can_upload_video']) || !empty($ctx['can_upload_file']),
+					'media_buttons'  => false,
 					'default_editor' => 'tinymce',
 					'quicktags'      => false,
 					'teeny'          => false,
@@ -66,8 +63,13 @@ $is_can_new = !empty($ctx['is_can_new']);
 				?>
 			</div>
 
-			<?php if (!empty($ctx['can_hide']) || !empty($ctx['can_pay'])) : ?>
+			<?php if (!empty($ctx['can_hide']) || !empty($ctx['can_pay']) || !empty($ctx['can_upload_img'])) : ?>
 			<div class="aksrt-submit-shortcode-tools">
+				<?php if (!empty($ctx['can_upload_img'])) : ?>
+					<button type="button" class="but" data-insert-upload-image>
+						<i class="fas fa-image"></i> <?php esc_html_e('上传图片', 'aksrt'); ?>
+					</button>
+				<?php endif; ?>
 				<?php if (!empty($ctx['can_hide'])) : ?>
 					<button type="button" class="but" data-insert-shortcode="hide" title="<?php esc_attr_e('插入登录后可见', 'aksrt'); ?>">
 						<i class="fas fa-eye-slash"></i> <?php esc_html_e('登录可见', 'aksrt'); ?>