FEAT: add permissions

README.md

@@ -56,6 +56,10 @@ You can call data from the Google settings on the frontend via `$GoogleConfig`,
 <% end_with %>
 ```
 
+## Permissions
+
+You'll need to be either an Administrator, or have the `CMS_ACCESS_GoogleConfig` permission to access and edit the Google Config section in the CMS.
+
 ### GTM Scripts
 
 You can render the GTM scripts in your template with the following: 

src/Admin/GoogleLeftAndMain.php

@@ -52,7 +52,7 @@ class GoogleLeftAndMain extends LeftAndMain
     /**
      * @var array
      */
-    private static $required_permission_codes = array('EDIT_SITECONFIG');
+    private static $required_permission_codes = 'CMS_ACCESS_GoogleConfig';
 
     /**
      * Initialises the {@link GoogleConfig} controller.

src/Model/GoogleConfig.php

@@ -2,7 +2,6 @@
 
 namespace Iliain\GoogleConfig\Models;
 
-use SilverStripe\Forms\GridField\GridFieldDeleteAction;
 use SilverStripe\ORM\DB;
 use SilverStripe\Forms\TabSet;
 use SilverStripe\ORM\DataList;
@@ -19,20 +18,22 @@
 use Iliain\GoogleConfig\Models\GooglePlace;
 use SilverStripe\Forms\GridField\GridField;
 use Iliain\GoogleConfig\Models\SchemaObject;
+use SilverStripe\Security\PermissionProvider;
 use SilverStripe\View\TemplateGlobalProvider;
 use Iliain\GoogleConfig\Models\SchemaProperty;
 use Iliain\GoogleConfig\Admin\GoogleLeftAndMain;
 use SilverStripe\Forms\GridField\GridFieldConfig;
 use SilverStripe\Forms\GridField\GridFieldButtonRow;
 use SilverStripe\Forms\GridField\GridFieldDetailForm;
 use Symbiote\GridFieldExtensions\GridFieldTitleHeader;
+use SilverStripe\Forms\GridField\GridFieldDeleteAction;
 use SilverStripe\Forms\GridField\GridFieldToolbarHeader;
 use Symbiote\GridFieldExtensions\GridFieldEditableColumns;
 use Symbiote\GridFieldExtensions\GridFieldAddNewInlineButton;
 use SilverStripe\Forms\GridField\GridFieldConfig_RecordEditor;
 use SilverStripe\Forms\GridField\GridFieldConfig_RelationEditor;
 
-class GoogleConfig extends DataObject implements TemplateGlobalProvider
+class GoogleConfig extends DataObject implements TemplateGlobalProvider, PermissionProvider
 {
     private static $table_name = 'GoogleConfig';
 
@@ -179,7 +180,7 @@ public function getCMSFields(): FieldList
      */
     public function getCMSActions(): FieldList
     {
-        if (Permission::check('ADMIN') || Permission::check('EDIT_SITECONFIG')) {
+        if (Permission::check('ADMIN') || Permission::check('CMS_ACCESS_GoogleConfig')) {
             $actions = new FieldList(
                 FormAction::create(
                     'save_googleconfig',
@@ -295,4 +296,20 @@ public function getSchemaCode(): string
 
         return $schemaStr;
     }
+
+    public function canEdit($member = null): bool
+    {
+        return Permission::check('CMS_ACCESS_GoogleConfig', 'any', $member);
+    }
+
+    public function providePermissions()
+    {
+        return [
+            'CMS_ACCESS_GoogleConfig' => [
+                'name' => 'Access to \'Google\' section',
+                'category' => 'CMS Access',
+                'help' => 'Allow viewing, adding, and editing Google settings.',
+            ]
+        ];
+    }
 }

src/Model/GooglePlace.php

@@ -15,6 +15,7 @@
 use SilverStripe\ORM\FieldType\DBHTMLText;
 use SilverStripe\Forms\ToggleCompositeField;
 use Iliain\GoogleConfig\Fields\GoogleMapField;
+use SilverStripe\Security\Permission;
 
 class GooglePlace extends DataObject 
 {
@@ -346,4 +347,24 @@ public function getBadge(): DBHTMLText
     {
         return $this->customise($this->getReviewData())->renderWith('Iliain\\GoogleConfig\\Models\\ReviewBadge');
     }
+
+    public function canView($member = null): bool
+    {
+        return true;
+    }
+
+    public function canEdit($member = null): bool
+    {
+        return Permission::check('CMS_ACCESS_GoogleConfig', 'any', $member);
+    }
+
+    public function canCreate($member = null, $context = []): bool
+    {
+        return $this->canEdit($member);
+    }
+
+    public function canDelete($member = null): bool
+    {
+        return $this->canEdit($member);
+    }
 }

src/Model/SchemaObject.php

@@ -5,18 +5,19 @@
 use SilverStripe\ORM\DataObject;
 use SilverStripe\Forms\FieldList;
 use SilverStripe\Forms\TextField;
+use SilverStripe\Forms\LiteralField;
+use SilverStripe\Security\Permission;
 use SilverStripe\Forms\GridField\GridField;
 use Iliain\GoogleConfig\Models\GoogleConfig;
 use SilverStripe\Forms\GridField\GridFieldConfig;
 use SilverStripe\Forms\GridField\GridFieldButtonRow;
-use SilverStripe\Forms\GridField\GridFieldConfig_RelationEditor;
 use SilverStripe\Forms\GridField\GridFieldDetailForm;
 use Symbiote\GridFieldExtensions\GridFieldTitleHeader;
 use SilverStripe\Forms\GridField\GridFieldDeleteAction;
 use SilverStripe\Forms\GridField\GridFieldToolbarHeader;
-use SilverStripe\Forms\LiteralField;
 use Symbiote\GridFieldExtensions\GridFieldEditableColumns;
 use Symbiote\GridFieldExtensions\GridFieldAddNewInlineButton;
+use SilverStripe\Forms\GridField\GridFieldConfig_RelationEditor;
 
 class SchemaObject extends DataObject 
 {
@@ -181,4 +182,24 @@ public function getSchemaCode(): string
 
         return json_encode($schemaData, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES);
     }
+
+    public function canView($member = null): bool
+    {
+        return true;
+    }
+
+    public function canEdit($member = null): bool
+    {
+        return Permission::check('CMS_ACCESS_GoogleConfig', 'any', $member);
+    }
+
+    public function canCreate($member = null, $context = []): bool
+    {
+        return $this->canEdit($member);
+    }
+
+    public function canDelete($member = null): bool
+    {
+        return $this->canEdit($member);
+    }
 }

src/Model/SchemaProperty.php

@@ -4,6 +4,7 @@
 
 use SilverStripe\ORM\DataObject;
 use SilverStripe\Forms\FieldList;
+use SilverStripe\Security\Permission;
 
 class SchemaProperty extends DataObject 
 {
@@ -70,4 +71,24 @@ public function getCMSFields(): FieldList
 
         return $fields;
     }
+
+    public function canView($member = null): bool
+    {
+        return true;
+    }
+
+    public function canEdit($member = null): bool
+    {
+        return Permission::check('CMS_ACCESS_GoogleConfig', 'any', $member);
+    }
+
+    public function canCreate($member = null, $context = []): bool
+    {
+        return $this->canEdit($member);
+    }
+
+    public function canDelete($member = null): bool
+    {
+        return $this->canEdit($member);
+    }
 }