It's something that's been overlooked - Django provides its own admin class
for the redirects, and doesn't filter/hide by site, since that's a
Mezzanine specific behaviour.

I've pushed a change for review that fixes it here:
https://github.com/stephenmcd/mezzanine/pull/1685

Thanks for raising this.

On Tue, Oct 4, 2016 at 9:04 AM, James Pic <[email protected]> wrote:

> Hi all !
>
> I'm just trying out Mezzanine, it's really cool ! It's my first time with
> mezzanine and I have a "bug or feature" type of question.
>
> In the Pages administration, staff may only work on pages of the current
> site.
>
> However, in the Redirects administration, staff may see redirects of other
> sites it doesn't have the permission for, also it may change or add
> redirects for sites it doesn't have permission for. It seems like a staff
> user could create a redirect with a wrong site it doesn't have permission
> for by mistake.
>
> I didn't find any documentation nor discussion about this, but then again
> I have like 10 minutes of experience in mezzanine so I'm really a newb :)
>
> Thanks for your time !
>
> Best
>
> James
>
> --
> You received this message because you are subscribed to the Google Groups
> "Mezzanine Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> For more options, visit https://groups.google.com/d/optout.
>



-- 
Stephen McDonald
http://jupo.org

-- 
You received this message because you are subscribed to the Google Groups 
"Mezzanine Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to