feat: New granular save and edit permissions

panel/src/components/Forms/FormControls.vue

@@ -6,7 +6,7 @@
 				:key="button.text"
 				class="k-form-controls-button"
 				v-bind="button"
-				:disabled="isProcessing"
+				:disabled="button.disabled || isProcessing"
 				variant="filled"
 				:size="size"
 			/>
@@ -54,11 +54,16 @@
 <script>
 export const props = {
 	props: {
+		canSave: Boolean,
 		editor: String,
 		hasDiff: Boolean,
 		isLocked: Boolean,
 		isProcessing: Boolean,
 		modified: [String, Date],
+		permissions: {
+			type: Object,
+			default: () => ({})
+		},
 		/**
 		 * Preview URL for changes
 		 */
@@ -102,10 +107,11 @@ export default {
 						click: () => this.discard()
 					},
 					{
+						disabled: this.canSave === false,
 						theme: "notice",
 						text: this.$t("save"),
 						icon: this.isProcessing ? "loader" : "check",
-						click: () => this.$emit("submit")
+						click: () => this.$emit("submit"),
 					},
 					{
 						theme: "notice",

panel/src/components/Views/Files/FileView.vue

@@ -20,6 +20,7 @@
 				<k-view-buttons :buttons="buttons">
 					<template #after>
 						<k-form-controls
+							:can-save="permissions.save"
 							:editor="editor"
 							:has-diff="hasDiff"
 							:is-locked="isLocked"

panel/src/components/Views/Pages/PageView.vue

@@ -20,6 +20,7 @@
 				<k-view-buttons :buttons="buttons">
 					<template #after>
 						<k-form-controls
+							:can-save="permissions.save"
 							:editor="editor"
 							:has-diff="hasDiff"
 							:is-locked="isLocked"

panel/src/components/Views/Pages/SiteView.vue

@@ -24,6 +24,7 @@
 				<k-view-buttons :buttons="buttons">
 					<template #after>
 						<k-form-controls
+							:can-save="permissions.save"
 							:editor="editor"
 							:has-diff="hasDiff"
 							:is-locked="isLocked"

panel/src/components/Views/Preview/PreviewBrowser.vue

@@ -12,6 +12,7 @@
 					</p>
 					<k-form-controls
 						v-else
+						:can-save="permissions.save"
 						:editor="editor"
 						:has-diff="hasDiff"
 						:is-locked="isLocked"

panel/src/components/Views/Preview/PreviewView.vue

@@ -107,6 +107,7 @@ export default {
 				isLocked: this.isLocked,
 				modified: this.modified,
 				label: this.$t("version." + versionId),
+				permissions: this.permissions,
 				src: this.src[versionId],
 				versionId: versionId
 			};

panel/src/components/Views/Users/UserView.vue

@@ -28,6 +28,7 @@
 				<k-view-buttons :buttons="buttons">
 					<template #after>
 						<k-form-controls
+							:can-save="permissions.save"
 							:editor="editor"
 							:has-diff="hasDiff"
 							:is-locked="isLocked"

src/Api/Controller/Changes.php

@@ -41,7 +41,7 @@ protected static function cleanup(ModelWithContent $model): void
 	 */
 	public static function discard(ModelWithContent $model): array
 	{
-		if ($model->permissions()->can('update') === false) {
+		if ($model->permissions()->can('edit') === false) {
 			throw new PermissionException(
 				key: 'version.discard.permission',
 			);
@@ -63,7 +63,7 @@ public static function discard(ModelWithContent $model): array
 	 */
 	public static function publish(ModelWithContent $model, array $input): array
 	{
-		if ($model->permissions()->can('update') === false) {
+		if ($model->permissions()->can('save') === false) {
 			throw new PermissionException(
 				key: 'version.publish.permission',
 			);
@@ -104,7 +104,7 @@ public static function publish(ModelWithContent $model, array $input): array
 	 */
 	public static function save(ModelWithContent $model, array $input): array
 	{
-		if ($model->permissions()->can('update') === false) {
+		if ($model->permissions()->can('edit') === false) {
 			throw new PermissionException(
 				key: 'version.save.permission',
 			);

src/Cms/Blueprint.php

@@ -674,7 +674,7 @@ protected function normalizeOptions(
 
 		// set all options to false
 		if ($options === false) {
-			return array_map(fn () => false, $defaults);
+			return array_fill_keys(array_keys($defaults), false);
 		}
 
 		// extend options if possible
@@ -684,7 +684,18 @@ protected function normalizeOptions(
 			$alias = $aliases[$key] ?? null;
 
 			if ($alias !== null) {
-				$options[$alias] ??= $value;
+				if (is_callable($alias) === true) {
+					$alias = $alias($value);
+				}
+
+				if (is_array($alias) === false) {
+					$alias = [$alias => $value];
+				}
+
+				foreach ($alias as $option => $value) {
+					$options[$option] ??= $value;
+				}
+
 				unset($options[$key]);
 			}
 		}

src/Cms/FileBlueprint.php

@@ -30,19 +30,25 @@ public function __construct(array $props)
 
 		// normalize all available page options
 		$this->props['options'] = $this->normalizeOptions(
-			$this->props['options'] ?? true,
-			// defaults
-			[
+			options: $this->props['options'] ?? true,
+			defaults: [
 				'access'         => null,
 				'changeName'     => null,
 				'changeTemplate' => null,
 				'create'     	 => null,
 				'delete'     	 => null,
+				'edit'           => null,
 				'list'     	     => null,
 				'read'       	 => null,
 				'replace'    	 => null,
+				'save'           => null,
 				'sort'           => null,
-				'update'     	 => null,
+			],
+			aliases: [
+				'update' => static fn ($value) => [
+					'edit' => $value,
+					'save' => $value,
+				],
 			]
 		);
 

src/Cms/FileRules.php

@@ -197,7 +197,10 @@ public static function replace(File $file, BaseFile $upload): void
 	 */
 	public static function update(File $file, array $content = []): void
 	{
-		if ($file->permissions()->can('update') !== true) {
+		if (
+			$file->permissions()->can('save') !== true ||
+			$file->permissions()->can('edit') !== true
+		) {
 			throw new PermissionException(
 				message: 'The file cannot be updated'
 			);

src/Cms/Helpers.php

@@ -32,6 +32,9 @@ class Helpers
 		// The internal `$model->contentFile*()` methods have been deprecated
 		'model-content-file' => true,
 
+		// Passing `$category = null` to `Permissions::for()` is not supported
+		'permissions-for-category-null' => true,
+
 		// Passing an `info` array inside the `extends` array
 		// has been deprecated. Pass the individual entries (e.g. root, version)
 		// directly as named arguments.

src/Cms/PageBlueprint.php

@@ -23,9 +23,8 @@ public function __construct(array $props)
 
 		// normalize all available page options
 		$this->props['options'] = $this->normalizeOptions(
-			$this->props['options'] ?? true,
-			// defaults
-			[
+			options: $this->props['options'] ?? true,
+			defaults: [
 				'access'     	 => null,
 				'changeSlug'     => null,
 				'changeStatus'   => null,
@@ -34,19 +33,23 @@ public function __construct(array $props)
 				'create'         => null,
 				'delete'         => null,
 				'duplicate'      => null,
+				'edit'           => null,
 				'list'           => null,
 				'move'           => null,
 				'preview'        => null,
 				'read'           => null,
+				'save'           => null,
 				'sort'           => null,
-				'update'         => null,
 			],
-			// aliases (from v2)
-			[
+			aliases: [
 				'status'   => 'changeStatus',
 				'template' => 'changeTemplate',
 				'title'    => 'changeTitle',
 				'url'      => 'changeSlug',
+				'update'   => static fn ($value) => [
+					'edit' => $value,
+					'save' => $value,
+				],
 			]
 		);
 

src/Cms/PageRules.php

@@ -397,7 +397,10 @@ public static function publish(Page $page): void
 	 */
 	public static function update(Page $page, array $content = []): void
 	{
-		if ($page->permissions()->can('update') !== true) {
+		if (
+			$page->permissions()->can('save') !== true ||
+			$page->permissions()->can('edit') !== true
+		) {
 			throw new PermissionException(
 				key: 'page.update.permission',
 				data: ['slug' => $page->slug()]