The "expected behavior" is that *one has permission on an entire table
would also have permission on a row of it*. This seems to be the one thing
that everyone can agree on. And, I am yet to see a person that argues
otherwise. But, it seems, we just need someone or some people to make
that *hard
*decision.
If that is the way forward, I will volunteer for the code. But, as you also
point out, there needs to be a *path* out. That I don't know :)
If I could pick and choose the backends, or types of backends, such as:
user.has_perm('foo.change_bar', obj, backends=('object', 'role', 'model'))
that would be lovely. However, I think I can live without it.
Cheers,
Mehmet
On Wed, Jan 17, 2018 at 3:38 PM Florian Apolloner <f.apollo...@gmail.com>
wrote:
> On Wednesday, January 17, 2018 at 7:58:17 PM UTC+1, Carlton Gibson wrote:
>>
>> Given your comment, would it be along the lines of "Close as "Won't Fix",
>> perhaps with a review of the documentation", to point users to subclassing
>> ModelBackend if they need the alternate behaviour?
>>
>
> My comment
> https://github.com/django/django/pull/9581#pullrequestreview-88665130
> sums up my thoughts. We should decide what the expected behavior for auth
> backends should be and then work towards that (if that means it should
> return True instead of False for obj!=None so be it). I am not happy with
> any of the proposed solutions so far (be that new arguments or settings).
>
> Btw, it would be nice if you could be on IRC if your time permits it.
>
> Cheers,
> Florian
>
> --
> You received this message because you are subscribed to a topic in the
> Google Groups "Django developers (Contributions to Django itself)" group.
> To unsubscribe from this topic, visit
> https://groups.google.com/d/topic/django-developers/MLWfvPPVwDk/unsubscribe
> .
> To unsubscribe from this group and all its topics, send an email to
> django-developers+unsubscr...@googlegroups.com.
> To post to this group, send email to django-developers@googlegroups.com.
> Visit this group at https://groups.google.com/group/django-developers.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/django-developers/c981a74f-4dd1-418f-b1f1-a2d6d383466c%40googlegroups.com
> <https://groups.google.com/d/msgid/django-developers/c981a74f-4dd1-418f-b1f1-a2d6d383466c%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>
--
You received this message because you are subscribed to the Google Groups
"Django developers (Contributions to Django itself)" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to django-developers+unsubscr...@googlegroups.com.
To post to this group, send email to django-developers@googlegroups.com.
Visit this group at https://groups.google.com/group/django-developers.
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-developers/CAFdefwOXpKRNhDN-55XGFN%2Bk9Gsb6g9feW1uLWiUCwzD8JLr6w%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.
