#11383: Admin action 'Delete selected' check only global model delete permission
-------------------------------------------+--------------------------------
Reporter: krej...@i3.cz | Owner: nobody
Status: new | Milestone:
Component: django.contrib.admin | Version: SVN
Resolution: | Keywords: delete permission
admin
Stage: Unreviewed | Has_patch: 0
Needs_docs: 0 | Needs_tests: 0
Needs_better_patch: 0 |
-------------------------------------------+--------------------------------
Changes (by whiskybar):
* needs_better_patch: => 0
* summary: Admin actiion 'Delete selected' check only global model
delete permission => Admin action 'Delete
selected' check only global model delete
permission
* needs_tests: => 0
* needs_docs: => 0
Comment:
Since no one has commented on this issue, I will try to put it another
way.
Deleting objects in the admin is inconsistent between
* deleting object by the action delete_selected
* deleting object from the detail view in the change form
The action delete_selected does not check has_delete_permission for each
selected object. Instead, it calls has_delete_permission for all objects.
On the other hand, the admin will check if one has permission to delete
the specific object in the view (the change form).
You have to disable the action delete_selected virtually if
has_delete_permission is in effect. In my humble opinion, the admin should
call has_delete_permission for each selected object with the action
delete_selected.
--
Ticket URL: <http://code.djangoproject.com/ticket/11383#comment:1>
Django <http://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To post to this group, send email to django-updates@googlegroups.com
To unsubscribe from this group, send email to
django-updates+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/django-updates?hl=en
-~----------~----~----~----~------~----~------~--~---
