silverstripe-framework/security/PermissionRole.php

<?php

/**
 * A PermissionRole represents a collection of permission codes that can be applied to groups.
 * 
 * Because permission codes are very granular, this lets website administrators create more
 * business-oriented units of access control - Roles - and assign those to groups.
 */
class PermissionRole extends DataObject {
	static $db = array(
		"Title" => "Varchar",
	);
	
	static $has_many = array(
		"Codes" => "PermissionRoleCode",
	);
	
	static $belongs_many_many = array(
		"Groups" => "Group",
	);
	
	static $default_sort = 'Title';
	
	function getCMSFields() {
		$fields = parent::getCMSFields();
		
		$fields->removeFieldFromTab('Root', 'Codes');
		$fields->removeFieldFromTab('Root', 'Groups');
		
		$fields->addFieldToTab('Root.Main', new TableField(
			"Codes",
			"PermissionRoleCode",
			array(
		        "Code" => _t('SecurityAdmin.CODE', 'Code'),
		        "Arg" => _t('SecurityAdmin.OPTIONALID', 'Optional ID'),
			),
			array(
				"Code" => "PermissionDropdownField",
				"Arg" => "TextField",
			),
			"RoleID",
			$this->ID
		));
		
		return $fields;
	}
}