Permissions

[mgax]

Since the newsletter functionality is controlled through the Wagtail admin, it's restricted to Wagtail admin users. It should be possible to further lock down permissions depending on the site's needs.

• [x] Restrict which users can edit NewsletterRecipients records (https://github.com/wagtail/wagtail-newsletter/issues/14). endpoint.
• [x] Restrict which users can send a newsletter (and, by default, require the Publish permission for that page) (https://github.com/wagtail/wagtail-newsletter/issues/24).
• [x] Restrict which users can see campaign report data (https://github.com/wagtail/wagtail-newsletter/issues/25).

These restrictions are not currently needed, but we can add them later:

• Restrict which NewsletterRecipients can be picked by a user when editing a newsletter page.
• Restrict which NewsletterRecipients records can be inspected by a user through the wagtail_newsletter:recipients