Add permissions

Author: hishamco

src/OrchardCoreContrib.Contents/ContentsPermissions.cs

@@ -0,0 +1,8 @@
+using OrchardCore.Security.Permissions;
+
+namespace OrchardCoreContrib.Contents;
+
+public sealed class ContentsPermissions
+{
+    public static readonly Permission ShareDraftContent = new("ShareDraftContent", "Share draft content items");
+}

src/OrchardCoreContrib.Contents/Drivers/ShareDraftContentDriver.cs

@@ -1,15 +1,26 @@
-using OrchardCore.ContentManagement;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Http;
+using OrchardCore.ContentManagement;
 using OrchardCore.ContentManagement.Display.ContentDisplay;
 using OrchardCore.DisplayManagement.Handlers;
 using OrchardCore.DisplayManagement.Views;
 using OrchardCoreContrib.Contents.ViewModels;
 
 namespace OrchardCoreContrib.Contents.Drivers;
 
-public sealed class ShareDraftContentDriver : ContentDisplayDriver
+public sealed class ShareDraftContentDriver(IAuthorizationService authorizationService, IHttpContextAccessor httpContextAccessor) : ContentDisplayDriver
 {
     public override async Task<IDisplayResult> EditAsync(ContentItem contentItem, BuildEditorContext context)
-        => Initialize<ShareDraftViewModel>("Content_ShareDraftButton", model => model.ContentItem = contentItem)
+    {
+        var user = httpContextAccessor.HttpContext.User;
+
+        if (!await authorizationService.AuthorizeAsync(user, ContentsPermissions.ShareDraftContent))
+        {
+            return null;
+        }
+
+        return Initialize<ShareDraftViewModel>("Content_ShareDraftButton", model => model.ContentItem = contentItem)
             .RenderWhen(() => Task.FromResult(!contentItem.Published))
             .Location("Actions:30");
+    }
 }

src/OrchardCoreContrib.Contents/Permissions.cs

@@ -0,0 +1,25 @@
+using OrchardCore;
+using OrchardCore.Security.Permissions;
+
+namespace OrchardCoreContrib.Contents;
+
+public class Permissions : IPermissionProvider
+{
+    private readonly IEnumerable<Permission> _allPermissions = [ContentsPermissions.ShareDraftContent];
+
+    public IEnumerable<PermissionStereotype> GetDefaultStereotypes() =>
+    [
+        new PermissionStereotype
+        {
+            Name = OrchardCoreConstants.Roles.Administrator,
+            Permissions = _allPermissions
+        },
+        new PermissionStereotype
+        {
+            Name = OrchardCoreConstants.Roles.Editor,
+            Permissions = _allPermissions
+        }
+    ];
+
+    public Task<IEnumerable<Permission>> GetPermissionsAsync() => Task.FromResult(_allPermissions);
+}

src/OrchardCoreContrib.Contents/Startup.cs

@@ -3,6 +3,7 @@
 using OrchardCore.Data;
 using OrchardCore.Data.Migration;
 using OrchardCore.Modules;
+using OrchardCore.Security.Permissions;
 using OrchardCoreContrib.Contents.Drivers;
 using OrchardCoreContrib.Contents.Indexes;
 using OrchardCoreContrib.Contents.Services;
@@ -21,5 +22,6 @@ public override void ConfigureServices(IServiceCollection services)
         services.AddIndexProvider<SharedDraftLinkIndexProvider>();
 
         services.AddScoped<IContentDisplayDriver, ShareDraftContentDriver>();
+        services.AddPermissionProvider<Permissions>();
     }
 }