#8060: Admin Inlines do not respect user permissions
-------------------------------------+-------------------------------------
               Reporter:             |          Owner:  sjaensch
  p.patruno@…                        |         Status:  assigned
                   Type:  Bug        |      Component:  contrib.admin
              Milestone:             |       Severity:  Normal
                Version:  SVN        |       Keywords:  inlines User
             Resolution:             |  authentication
           Triage Stage:  Accepted   |      Has patch:  1
    Needs documentation:  0          |    Needs tests:  0
Patch needs improvement:  0          |  Easy pickings:  0
                  UI/UX:  0          |
-------------------------------------+-------------------------------------
Changes (by sjaensch):

 * needs_better_patch:  1 => 0
 * needs_tests:  1 => 0


Comment:

 Version 2 of the patch is ready. I moved the permission checking code to
 the InlineModelAdmin class and added some tests. Fine-grained permission
 checking for the change_view should now work too. Any comments welcome.
 I'm not very fond of how I return an empty queryset by using
 pk__isnull=True as filter. Anybody have a better solution for that? I
 think the patch is more or less ready for review.

-- 
Ticket URL: <https://code.djangoproject.com/ticket/8060#comment:19>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Reply via email to