sminnee / silverstripe-framework

     * Users can edit their own record.

     * Otherwise they'll need ADMIN or CMS_ACCESS_SecurityAdmin permissions

     */

    public function canEdit($member = null) {

        //get member

        if(!($member instanceof Member)) {

            $member = Member::currentUser();

        }

        //check for extensions, we do this first as they can overrule everything

        $extended = $this->extendedCan(__FUNCTION__, $member);

        if($extended !== null) {

            return $extended;

        }

        //need to be logged in and/or most checks below rely on $member being a Member

        if(!$member) {

            return false;

        }

        // HACK: we should not allow for an non-Admin to edit an Admin

        if(!Permission::checkMember($member, 'ADMIN') && Permission::checkMember($this, 'ADMIN')) {

            return false;

        }

        // members can usually edit their own record

        if($this->ID == $member->ID) {

            return true;

        }

        //standard check

        return Permission::checkMember($member, 'CMS_ACCESS_SecurityAdmin');

    }

    /**

     * Users can edit their own record.

     * Otherwise they'll need ADMIN or CMS_ACCESS_SecurityAdmin permissions

     * Users can edit their own record.

     * Otherwise they'll need ADMIN or CMS_ACCESS_SecurityAdmin permissions

     */

    public function canDelete($member = null) {

        if(!($member instanceof Member)) {

            $member = Member::currentUser();

        }

        //check for extensions, we do this first as they can overrule everything

        $extended = $this->extendedCan(__FUNCTION__, $member);

        if($extended !== null) {

            return $extended;

        }

        //need to be logged in and/or most checks below rely on $member being a Member

        if(!$member) {

            return false;

        }

        // Members are not allowed to remove themselves,

        // since it would create inconsistencies in the admin UIs.

        if($this->ID && $member->ID == $this->ID) {

            return false;

        }

        // HACK: if you want to delete a member, you have to be a member yourself.

        // this is a hack because what this should do is to stop a user

        // deleting a member who has more privileges (e.g. a non-Admin deleting an Admin)

        if(Permission::checkMember($this, 'ADMIN')) {

            if( ! Permission::checkMember($member, 'ADMIN')) {

                return false;

            }

        }

        //standard check

        return Permission::checkMember($member, 'CMS_ACCESS_SecurityAdmin');

    }

	/**

	 * Validate this member object.