Restrict

Restrict is a Statamic addon that lets you choose from which collection a user can view other authors' entries.

Features

Restrict entry listings from being visible to other authors in the control panel. There are times where it might be useful when not every user in the control panel can view all entries of collections they're permitted to view. That's when Restrict comes in.

After installing the addon, by default a user (who is not a super admin), can only see the entries they've created themselves. Choose for which collections a user is able to view all entries within the collection by checking the checkboxes in the control panel.

A user will be able to view an entry when one of the following is true:

• the value of the field author of the entry matches the user's id
• the permission to View other authors' entries is given
• the user is a super admin

How to Install

You can search for this addon in the Tools > Addons section of the Statamic control panel and click install, or run the following command from your project root:

composer require doefom/restrict

How to Use

Restrict works by taking a Users Fieldtype with the handle author into account when querying entries. Statamic's Edit other authors' entries permission functions the exact same way.

Therefore, if the permission View other authors' entries is not granted for a given collection AND an entry within that collection does not have an author field, the entry cannot be viewed unless you're a super admin.

Caveats

Class Bindings

Restrict works by overriding and rebinding some classes in the addon's ServiceProvider:

protected $policies = [
    \Statamic\Entries\Entry::class => \Doefom\Restrict\Policies\EntryPolicy::class,
];

public function register()
{

    $this->app->bind(
        \Statamic\Entries\Collection::class,
        \Doefom\Restrict\Entries\Collection::class
    );

    $this->app->bind(
        \Statamic\Fieldtypes\Entries::class,
        \Doefom\Restrict\Fieldtypes\Entries::class
    );

}

All of those classes extend the respective original class and perform minor changes on it. If you were to override or use another addon which rebinds one or more of those classes, you might run into issues. That's just something to keep in mind when using this addon.

Further Notes

REST API

The addon does not affect Statamic's REST API. Therefore all entries will be visible to any user if the API is enabled.