Hi Mehmet On Tuesday, 23 January 2018 15:05:06 UTC+1, Mehmet Dogan wrote: > > Do you think what Florian or I sent is a good example to include in the > docs for the way #1? >
Yes. I was just looking for where. Candidates: * https://docs.djangoproject.com/en/2.0/topics/auth/default/#topic-authorization * https://docs.djangoproject.com/en/2.0/ref/contrib/auth/#django.contrib.auth.models.User.has_perm * https://docs.djangoproject.com/en/dev/topics/auth/customizing/#handling-authorization-in-custom-backends None of these are quite right. (Although top one is favourite. The last one has this line: "If you wish to provide custom behavior for only part of the backend API, you can take advantage of Python inheritance and subclass ModelBackend instead of implementing the complete API in a custom backend..." — which is about as close as we get.) There's also this discussion: * https://code.djangoproject.com/wiki/RowLevelPermissions Looking at this, I don't think we're quite saying what I took us to be saying. i.e. we're not clearly spelling out the object-permissions situation. (Beyond those pages all the top search results are from DRF, and Django Guardian, which must be where people are picking up this knowledge.) As such, if you wanted to work on a docs focused PR here I'd be happy to review and input on that on GitHub. (I take it this would say a bit more than currently on how User.has_perms() proxies to the backends, such that some may handle object-level permissions.) Thanks for the effort! Kind Regards, Carlton -- You received this message because you are subscribed to the Google Groups "Django developers (Contributions to Django itself)" group. To unsubscribe from this group and stop receiving emails from it, send an email to django-developers+unsubscr...@googlegroups.com. To post to this group, send email to django-developers@googlegroups.com. Visit this group at https://groups.google.com/group/django-developers. To view this discussion on the web visit https://groups.google.com/d/msgid/django-developers/684dc59f-ba6f-44b0-9da3-59b1dad06062%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
