[6.x] Forms 2: Access

[duncanmcclean]

This pull request implements form access controls, letting you restrict when a form accepts submissions. You can schedule a close date, cap the number of submissions, and require visitors to be logged in.

These "restrictions" can be configured in the form's settings. They're enforced server-side when the form is submitted and surfaced to templates so they can limit when the form is rendered.

Options

When a limit period is set, the counter resets at the app timezone's midnight / start of the week / start of the month.

Preventing submissions

The simplest way to prevent visitors submitting closed forms is to wrap the form's contents in a conditional:

{{ form:contact }}
    {{ if restricted }}
        <p>{{ restriction_message }}</p>
    {{ else }}
        {{ fields }} ... {{ /fields }}
    {{ /if }}
{{ /form:contact }}

Statamic will also reject submissions server-side and return a validation error when a form is restricted.

Form status

This PR adds a $form->status() method which returns open, closed, or limit_reached.

The status is visitor-agnostic — describing the form's lifecycle rather than if a given visitor can access the form (so require_login doesn't affect it.

A status indicator has been added to form pages across the Control Panel: