add permission (#1)

Author: edalzell

CHANGELOG.md

@@ -2,6 +2,11 @@
 
 All notable changes to `statamic-forma` will be documented in this file.
 
+## 1.0 - 2021-08-12
+
+* official release
+* add permission
+
 ## 0.8 - 2020-12-19
 
 * Allow addons to pre/post process the config

README.md

@@ -33,6 +33,10 @@ Once you do that, you get a menu item in the cp that your users can access and u
 
 ![menu item](https://raw.githubusercontent.com/edalzell/statamic-forma/main/images/mailchimp-menu.png)
 
+### Permissions
+
+There is a `Manage Addon Settings` permission that must be enabled to allow a user to update the settings of any Forma-enabled addons.
+
 ### Extending
 
 If your addon needs to wangjangle the config before loading and after saving, create your own controller that `extends \Edalzell\Forma\ConfigController` and use the `preProcess` and `postProcess` methods.

src/FormaAddon.php

@@ -36,7 +36,8 @@ private function bootNav()
         NavAPI::extend(fn (Nav $nav) => $nav
             ->content($addon->name())
             ->section('Settings')
-            ->route($addon->slug().'.config.edit')
+            ->can('manage addon settings')
+            ->route($addon->slug() . '.config.edit')
             ->icon('settings-horizontal'));
     }
 

src/ServiceProvider.php

@@ -2,6 +2,7 @@
 
 namespace Edalzell\Forma;
 
+use Statamic\Facades\Permission;
 use Statamic\Providers\AddonServiceProvider;
 use Statamic\Statamic;
 
@@ -16,6 +17,15 @@ public function boot()
     {
         parent::boot();
 
-        Statamic::booted(fn () => Forma::all()->each->boot());
+        Statamic::booted(function () {
+            $this->bootPermissions();
+            Forma::all()->each->boot();
+        });
+    }
+
+    private function bootPermissions()
+    {
+        Permission::register('manage addon settings')
+            ->label('Manage Addon Settings');
     }
 }