(wip) Provide CRUD permissions for ECK entities

systopia · Jun 9, 2022 · d447774 · d447774
1 parent 6169f89
commit d447774
Show file tree

Hide file tree

Showing 2 changed files with 27 additions and 1 deletion.
diff --git a/Civi/Api4/EckEntity.php b/Civi/Api4/EckEntity.php
@@ -131,7 +131,15 @@ public static function checkAccess(string $entity_type) {
    * @return array
    */
   public static function permissions() {
-    return []; // FIXME: Add per-entity-type permissions
+    // TODO: OR-combined permissions for either any ECK entity type or type-specific.
+    return [
+      'meta' => ['access CiviCRM'],
+      'default' => ['administer CiviCRM'],
+      'create' => ['create any ECK entity'],
+      'get' => ['retrieve any ECK entity'],
+      'update' => ['edit any ECK entity'],
+      'delete' => ['delete any ECK entity'],
+    ];
   }
 
 }
diff --git a/eck.php b/eck.php
@@ -271,4 +271,22 @@ function eck_civicrm_permission(&$permissions) {
     E::ts('Delete ECK Entity Types'),
     E::ts('Allows deleting Entity Construction Kit Entity Types.'),
   ];
+
+  // Permissions for ECK entities.
+  $permissions['create any ECK entity'] = [
+    E::ts('Create any ECK Entity'),
+    E::ts('Allows creating new Entity Construction Kit Entities of any type.'),
+  ];
+  $permissions['retrieve any ECK entity'] = [
+    E::ts('Retrieve any ECK Entity'),
+    E::ts('Allows retrieving Entity Construction Kit Entities of any type.'),
+  ];
+  $permissions['edit any ECK entity'] = [
+    E::ts('Edit any ECK Entity'),
+    E::ts('Allows editing Entity Construction Kit Entities of any type.'),
+  ];
+  $permissions['delete any ECK entity'] = [
+    E::ts('Delete any ECK Entity'),
+    E::ts('Allows deleting Entity Construction Kit Entities of any type.'),
+  ];
 }