#29419: Document the change in permissions required to perform admin actions
---------------------------------+------------------------------------
Reporter: Paulo | Owner: nobody
Type: Bug | Status: new
Component: Documentation | Version: 2.1
Severity: Release blocker | Resolution:
Keywords: | Triage Stage: Accepted
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
---------------------------------+------------------------------------
Comment (by Hiroki Kiyohara):
I understood. You meant the behavior of ``ModelAdmin.get_actions`` has
changed, and it should be described as backward incompatible change.
https://github.com/django/django/blob/2.1a1/django/contrib/admin/options.py#L863-L865
I agree.
We need...
* Writing about it in the release note
* Adding "version changed" note here
https://docs.djangoproject.com/en/dev/ref/contrib/admin/actions/#django.contrib.admin.ModelAdmin.get_actions
Also I agree that the current design is not perfect.
* Actions like "CSV Download" requires only "view" permission, so
disabling all actions by "change" permission does not make sense for me
* Django should notice which permission is required by each actions
https://github.com/django/django/pull/5297#discussion_r42751084
--
Ticket URL: <https://code.djangoproject.com/ticket/29419#comment:2>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/066.f2c83750aa07269a59c2dbac7a2ecbfb%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.
