SS3 DataObject Permissions Functionality

CustomDataObject.php

<?php

class CustomDataObject extends DataObject implements PermissionProvider
{
  
    static $api_access = true;
    static $permissionsSuffix = "CUSTOMDATAOBJECT"; // Permission code will be ACTION_SUFFIX
    static $permissionsDescriptor = "Custom";
    static $permissionsCategory = 'Custom Object';
    static $permissionsActionsArray = array('view','edit','delete','create');
    static $permissionsArray = array();

    function providePermissions() {
        $suffix = self::$permissionsSuffix;
        $descriptor = self::$permissionsDescriptor;
        $category = self::$permissionsCategory;
        foreach (self::$permissionsActionsArray as $action) {
            $permissionName = strtoupper($action) . '_' . $suffix;
            self::$permissionsArray[$permissionName] = array(
                'name' => ucfirst($action) . ' an ' . $descriptor . ' object',
                'help' => 'Allow user to ' . $action . ' ' . $descriptor . ' objects',
                'category' => $category,
                'sort' => 50
            );
        }
        return self::$permissionsArray;
    }

    function canView($member = null) {
        return Permission::check('VIEW_' . self::$permissionsSuffix);
    }
    function canEdit($member = null) {
        return Permission::check('EDIT_' . self::$permissionsSuffix);
    }
    function canDelete($member = null) {
        return Permission::check('DELETE_' . self::$permissionsSuffix);
    }
    function canCreate($member = null) {
        return Permission::check('CREATE_' . self::$permissionsSuffix);
    }
}