silverstripe/silverstripe-framework — pull request #2880 by hdrlab (2014-02-20 03:58:43+00:00)
Title: Update CTF to enforce per-item permissions

ComplexTableField_Item's edit() and delete() functions currently only check global permissions before executing either action. This patch calls the item's own canEdit()/canDelete() methods, to make sure that any fine-grained permissions are respected.

An example use case is assets management with per-file access permissions and with the DataObjectManager class installed (so that CTF is used).