Permission for readonly fields

Author: wilr

src/ManyField.php

@@ -228,20 +228,32 @@ public function setCanAdd($bool) {
      * @return boolean
      */
     public function canAdd() {
+        if ($this->readonly) {
+            return false;
+        }
+
         return $this->canAdd;
     }
 
     /**
      * @return boolean
      */
     public function canRemove() {
+        if ($this->readonly) {
+            return false;
+        }
+
         return $this->canRemove;
     }
 
     /**
      * @return boolean
      */
     public function canSort() {
+        if ($this->readonly) {
+            return false;
+        }
+
         return $this->canSort;
     }
 
@@ -369,6 +381,10 @@ public function saveRecord()
             return Controller::curr()->httpError(400);
         }
 
+        if ($this->readonly) {
+            return Controller::curr()->httpError(401);
+        }
+
         $index = Controller::curr()->getRequest()->requestVar('ID');
         $class = Controller::curr()->getRequest()->requestVar('ClassName');
 
@@ -437,15 +453,14 @@ public function recordForm()
 
         $record = $class::get()->byId($index);
 
-        if (!$record || !$record->canEdit()) {
+        if (!$record || !$record->canView()) {
             return Controller::curr()->httpError(404);
         }
 
         $response = new HTTPResponse();
 
         $edit = $this->generateRow(0, $record, false);
         $edit->removeExtraClass('row manyfield__row');
-
         $response->setBody($edit->FieldHolder());
 
         return $response;
@@ -462,6 +477,10 @@ public function deleteRecord()
             return Controller::curr()->httpError(400);
         }
 
+        if ($this->readonly) {
+            return Controller::curr()->httpError(401);
+        }
+
         $index = Controller::curr()->getRequest()->getVar('ID');
         $class = Controller::curr()->getRequest()->getVar('ClassName');
 
@@ -638,6 +657,9 @@ public function generateRow($index, $value = null, $prefixName = true)
             $field = clone $child;
             $field = $this->updateManyNestedField($field, $index, $value, $prefixName);
 
+            $field = $field->setReadonly($this->readonly);
+            $field = $field->setDisabled($this->readonly);
+
             $row->push($field);
         }
 

templates/ManyFieldModal.ss

@@ -35,7 +35,7 @@
       </div>
 
       <div class="modal-footer">
-        <button type="button" class="btn btn-primary manyfield__save">Save</button>
+        <% if not isReadonly %><button type="button" class="btn btn-primary manyfield__save">Save</button><% end_if %>
         <button type="button" class="btn btn-default" data-dismiss="modal">Close</button>
       </div>
     </div><!-- /.modal-content -->