s&box Ownable Pattern: Prop Protection with Event Integration

public sealed class Ownable : Component, IPhysgunEvent, IToolgunEvent
{
    [Sync(SyncFlags.FromHost)]
    private Guid _ownerId { get; set; }
    
    [Property, ReadOnly, JsonIgnore]
    public Connection Owner
    {
        get => Connection.All.FirstOrDefault(c => c.Id == _ownerId);
        set => _ownerId = value?.Id ?? Guid.Empty;
    }
    
    // Static factory method
    public static Ownable Set(GameObject go, Connection owner)
    {
        var ownable = go.GetOrAddComponent<Ownable>();
        ownable.Owner = owner;
        return ownable;
    }
}

[ConVar("sb.ownership_checks", 
    ConVarFlags.Replicated | ConVarFlags.Server | ConVarFlags.GameSetting,
    Help = "Enforce ownership, players can only interact with their own props.")]
public static bool OwnershipChecks { get; set; } = false;

internal bool CallerHasAccess(Connection caller) => 
    HasAccess(caller, Owner);

public static bool HasAccess(Connection caller, Connection owner)
{
    if (!OwnershipChecks) return true;           // Disabled
    if (caller is null) return false;             // No caller
    if (caller.HasPermission("admin")) return true;  // Admin bypass
    if (owner is null) return true;              // Unowned object
    return owner == caller;                       // Owner matches
}

public static class OwnableExtensions
{
    public static bool HasAccess(this GameObject go, Connection caller)
    {
        if (go.Components.TryGet<Ownable>(out var ownable))
            return ownable.CallerHasAccess(caller);
        return true;  // No Ownable = accessible
    }
}

// Block PhysGun grab for non-owners
void IPhysgunEvent.OnPhysgunGrab(IPhysgunEvent.GrabEvent e)
{
    if (!CallerHasAccess(e.Grabber))
        e.Cancelled = true;
}

// Block ToolGun selection for non-owners
void IToolgunEvent.OnToolgunSelect(IToolgunEvent.SelectEvent e)
{
    if (!CallerHasAccess(e.User))
        e.Cancelled = true;
}

// When spawning objects
var go = GameObject.Clone(prefab);
Ownable.Set(go, player.Network.Owner);  // Assign ownership
go.NetworkSpawn();

// In RPC validation
[Rpc.Host]
void DeleteInspectedObject(GameObject go)
{
    if (!go.HasAccess(Rpc.Caller)) return;  // Security check
    if (go.Tags.Has("player")) return;       // Never delete players
    go.Destroy();
}

// In ToolGun modes
void OnControl()
{
    if (Input.Pressed("attack1"))
    {
        var tr = Scene.Trace.Ray(AimRay, 5000).Run();
        if (!tr.GameObject.HasAccess(Rpc.Caller)) return;
        
        // ...operate on object...
    }
}