Added content model checks in makeObject(...) Added new restriction option to the fedora collection list settings page that allows you to enable/disable restrcitions. Defaults to restrict for security.

ObjectHelper.inc

@@ -54,13 +54,28 @@ class ObjectHelper {
       return ' ';
     }
 
-
     if (!fedora_repository_access(OBJECTHELPER :: $OBJECT_HELPER_VIEW_FEDORA, $pid, $user)) {
       drupal_set_message(t("You do not have access Fedora objects within the attempted namespace."), 'error');
       drupal_access_denied();
       return ' ';
     } 
 
+    
+    if (variable_get('fedora_object_restrict_datastreams', TRUE) == TRUE ) {    
+      if (($cm = ContentModel::loadFromObject($pid)) == FALSE) {
+	drupal_set_message(t("You do not have access to objects without an Islandora Content Model."), 'error');
+	drupal_access_denied();
+	return ' ';
+      }
+
+      $cmDatastreams = $cm->listDatastreams();
+      if ( !((isset($user) && in_array('administrator',$user->roles)) || in_array($dsID,$cmDatastreams))) {
+	drupal_set_message(t("You do not have access to the specified datastream."), 'error');
+	drupal_access_denied();
+	return ' ';
+      }
+    }
+
     module_load_include('inc', 'fedora_repository', 'api/fedora_item');
     $item = new Fedora_Item($pid);
 

formClass.inc

@@ -378,6 +378,13 @@ class formClass {
       '#description' => t('Determines when to display the default object (or collection) description fieldset when viewing an object/collection page.'),
     );
     
+    $form['fedora_object_restrict_datastreams'] = array(
+      '#type' => 'checkbox',
+      '#title' => t('Restrict Access to Fedora Object Datastreams'),
+      '#default_value'=> variable_get('fedora_object_restrict_datastreams', TRUE),
+      '#description' => t('When enabled, restricts access to fedora object datastreams that are not listed in the Islandora Content Model for the object (unless the user is an administrator).'),
+    );    
+
     $form['fedora_collection_display_list'] = array(
       '#type' => 'select',
       '#title' => t('Display Collection List Behaviour'),