#29967: Django Admin Inlines, for users who only have "view" permission on the
inline model, return Validation errors.
-----------------------------------------+------------------------
               Reporter:  matijakolaric  |          Owner:  nobody
                   Type:  Uncategorized  |         Status:  new
              Component:  contrib.admin  |        Version:  2.1
               Severity:  Normal         |       Keywords:
           Triage Stage:  Unreviewed     |      Has patch:  0
    Needs documentation:  0              |    Needs tests:  0
Patch needs improvement:  0              |  Easy pickings:  0
                  UI/UX:  0              |
-----------------------------------------+------------------------
 The way to reproduce:

 1. Make three models, two with a FKs to the first one, and create
 ModelAdmin for one, that includes inlines for the other two.

 2. Create a new object with both inline types with a user who has
 ass/change permissions to everything.

 3. Open the same changeview with a user that has change permission for the
 main model and one of the inlines, and only view permission for the other
 inline model.

 4. Save

 What happens is that Validation Error is raised (which is not visible, but
 present in form.errors) stating that the fields in the inline are
 required.

 What should happen is that the whole inline should really be ignored,
 basically, the behaviour should be the same as if the user did not even
 have the "view" permission for the inline.

-- 
Ticket URL: <https://code.djangoproject.com/ticket/29967>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/056.fff27a8b438befe8dd18954f8213cbf3%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to