#14370: Adding support for Autocomplete in contrib.admin
-------------------------------------+-------------------------------------
     Reporter:  tyrion               |                    Owner:  codingjoe
         Type:  New feature          |                   Status:  assigned
    Component:  contrib.admin        |                  Version:  master
     Severity:  Normal               |               Resolution:
     Keywords:  autocomplete,        |             Triage Stage:  Accepted
  jquery, javascript, widgets,       |
  admin                              |
    Has patch:  1                    |      Needs documentation:  0
  Needs tests:  0                    |  Patch needs improvement:  0
Easy pickings:  0                    |                    UI/UX:  1
-------------------------------------+-------------------------------------

Comment (by yeago):

 I'd like to raise something else for discussion...

 Regarding permission checks, I think matching the way raw_id_fields would
 just be building in unwanted limitations in many cases. Firstly, the
 permission says 'change' where no change is occurring. It just seemed like
 the original implementation was taking a short-cut by using that
 permission (since it was effectively a pop-out changeview).

 In many cases, someone may want to grant access to a form that has an
 autocomplete list of users but that doesn't mean they want to grant change
 access to their user list. Moreover, we're already granting a permission
 when we are allowing access to the admin form the autocomplete would be
 used on. I'm not sure what case we are covering by granting access to a
 form but not granting access to the autocomplete we explicitly added.

--
Ticket URL: <https://code.djangoproject.com/ticket/14370#comment:50>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To post to this group, send email to django-updates@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/064.2c469a1056351426a6f2b10842af63c8%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to