silverstripe-restrictedobjects | SilverStripe module to lock down object access

Place this directory in the root of your SilverStripe installation. Ensure that the folder name is restrictedobjects.
Run dev/build with the ?disable_perms=1 parameter - in dev mode, permissions can be disabled by using this flag, which is needed to ensure things are installed correctly
Assign the extensions
Run dev/build again, login to your system as an admin
On your "Site" object, make sure the "Allow public access" checkbox is enabled so that the site is still viewable.
Create the following DB index; SS doesn't give a nice way to do this and static $indexes doesn't seem to work anyway... ALTER TABLE AccessAuthority ADD INDEX ( ItemID , ItemType ) ;
To manage permissions using the restricted objects module, there are a few steps commonly performed. Some default access roles are automatically created when you install the system. These can be accessed via the Access Roles section. To define new roles, you simply create a new AccessRole item, and select the permissions you want to use within it. Assigning roles are done from the "Permissions" tab of any content item. You can specify the role to assign for a user or a group, and whether you are granting or denying that role. You can also choose individual permissions to apply or revoke. To define a new low-level permission item, you must define a class that implements PermissionDefiner (not to be confused with the default SilverStripe interface PermissionProvider) and return a simple array of strings in the definePermissions() method. These strings should be the permissions you check for in $obj->checkPerm('CustomPerm');. See the (wiki)[https://github.com/nyeholt/silverstripe-restrictedobjects/wiki] for more.
Navigate to the node (SiteConfig, Page, or custom data object type) that you want permissions applied on.
On the Permissions tab, click "Add Access Authority"
Select the role to give the user. This will give them the permissions defined for this role in the Access Roles section of the CMS
Select which members or groups to grant this role for
Select whether to GRANT or DENY this permission
Click "Save"
Once the permission table refreshes, you will see all the permissions granted for that "Authority".