#8060: Admin Inlines do not respect user permissions
-------------------------------------+-------------------------------------
               Reporter:             |          Owner:  sjaensch
  p.patruno@…                        |         Status:  assigned
                   Type:  Bug        |      Component:  contrib.admin
              Milestone:             |       Severity:  Normal
                Version:  SVN        |       Keywords:  inlines User
             Resolution:             |  authentication
           Triage Stage:  Accepted   |      Has patch:  1
    Needs documentation:  0          |    Needs tests:  0
Patch needs improvement:  1          |  Easy pickings:  0
                  UI/UX:  0          |
-------------------------------------+-------------------------------------

Comment (by sjaensch):

 1. This is a very good point. I was not sure about how I should split them
 up. Should I create multiple methods on TestInline or should I go and
 create a separate TestCase class for it?
 2. Thanks! I'll change it in the next version.
 3. Good point! I Hadn't thought about that. I'll post a patch tomorrow
 with the changed behavior. One point to consider though: We then cannot
 restrict adding additional relationships (or disallow the editing of
 existing relationships) for auto-created intermediate m2m models. I think
 treating the through relationship as if it were the destination model
 might be better semantics. The through model is hidden from the user (as
 well as the programmer) anyway, that's why there are no permissions for
 it. But that's just my personal opinion, I'll gladly defer to your
 judgment. Or should we ask on django-developers what the others prefer?

-- 
Ticket URL: <https://code.djangoproject.com/ticket/8060#comment:21>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Reply via email to