BaseElementObject - refactor permissions (#75)

Follows model of BaseElement - largely Page permission based when possible

src/Model/AccordionPanel.php

@@ -64,4 +64,20 @@ public function getCMSFields()
 
         return parent::getCMSFields();
     }
+
+    /**
+     * @return null
+     */
+    public function getPage()
+    {
+        $page = null;
+
+        if ($this->AccordionID) {
+            if ($this->Accordion()->hasMethod('getPage')) {
+                $page = $this->Accordion()->getPage();
+            }
+        }
+
+        return $page;
+    }
 }

src/Model/BaseElementObject.php

@@ -8,6 +8,7 @@
 use SilverStripe\Forms\FieldList;
 use SilverStripe\ORM\DataObject;
 use SilverStripe\ORM\ValidationResult;
+use SilverStripe\Security\Permission;
 use SilverStripe\Versioned\Versioned;
 
 /**
@@ -135,4 +136,96 @@ public function validate()
 
         return $result;
     }
+
+    /**
+     * @return null
+     */
+    public function getPage()
+    {
+        return null;
+    }
+
+    /**
+     * Basic permissions, defaults to page perms where possible.
+     *
+     * @param Member $member
+     * @return boolean
+     */
+    public function canView($member = null)
+    {
+        $extended = $this->extendedCan(__FUNCTION__, $member);
+        if ($extended !== null) {
+            return $extended;
+        }
+
+        if ($page = $this->getPage()) {
+            return $page->canView($member);
+        }
+
+        return (Permission::check('CMS_ACCESS', 'any', $member)) ? true : null;
+    }
+
+    /**
+     * Basic permissions, defaults to page perms where possible.
+     *
+     * @param Member $member
+     *
+     * @return boolean
+     */
+    public function canEdit($member = null)
+    {
+        $extended = $this->extendedCan(__FUNCTION__, $member);
+        if ($extended !== null) {
+            return $extended;
+        }
+
+        if ($page = $this->getPage()) {
+            return $page->canEdit($member);
+        }
+
+        return (Permission::check('CMS_ACCESS', 'any', $member)) ? true : null;
+    }
+
+    /**
+     * Basic permissions, defaults to page perms where possible.
+     *
+     * Uses archive not delete so that current stage is respected i.e if a
+     * element is not published, then it can be deleted by someone who doesn't
+     * have publishing permissions.
+     *
+     * @param Member $member
+     *
+     * @return boolean
+     */
+    public function canDelete($member = null)
+    {
+        $extended = $this->extendedCan(__FUNCTION__, $member);
+        if ($extended !== null) {
+            return $extended;
+        }
+
+        if ($page = $this->getPage()) {
+            return $page->canArchive($member);
+        }
+
+        return (Permission::check('CMS_ACCESS', 'any', $member)) ? true : null;
+    }
+
+    /**
+     * Basic permissions, defaults to page perms where possible.
+     *
+     * @param Member $member
+     * @param array $context
+     *
+     * @return boolean
+     */
+    public function canCreate($member = null, $context = array())
+    {
+        $extended = $this->extendedCan(__FUNCTION__, $member);
+        if ($extended !== null) {
+            return $extended;
+        }
+
+        return (Permission::check('CMS_ACCESS', 'any', $member)) ? true : null;
+    }
 }

src/Model/FeatureObject.php

@@ -66,4 +66,20 @@ public function getCMSFields()
 
         return parent::getCMSFields();
     }
+
+    /**
+     * @return null
+     */
+    public function getPage()
+    {
+        $page = null;
+
+        if ($this->ElementFeatures()) {
+            if ($this->ElementFeatures()->hasMethod('getPage')) {
+                $page = $this->ElementFeatures()->getPage();
+            }
+        }
+
+        return $page;
+    }
 }

src/Model/GalleryImage.php

@@ -85,4 +85,20 @@ public function getCMSFields()
 
         return $fields;
     }
+
+    /**
+     * @return null
+     */
+    public function getPage()
+    {
+        $page = null;
+
+        if ($this->PhotoGallery()) {
+            if ($this->PhotoGallery()->hasMethod('getPage')) {
+                $page = $this->PhotoGallery()->getPage();
+            }
+        }
+
+        return $page;
+    }
 }

src/Model/PromoObject.php

@@ -61,4 +61,20 @@ public function getCMSFields()
 
         return parent::getCMSFields();
     }
+
+    /**
+     * @return null
+     */
+    public function getPage()
+    {
+        $page = null;
+
+        if ($this->ElementPromos()) {
+            if ($this->ElementPromos()->hasMethod('getPage')) {
+                $page = $this->PhotoGallery()->getPage();
+            }
+        }
+
+        return $page;
+    }
 }