test0908
/
django
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Fixed #17131 - Added per object permission notes to docs. 

Thanks dchandek for the suggestion and mateusgondim for the patch.
This commit is contained in:
Tim Graham 2012-07-30 16:16:11 -04:00
parent 4129201c3e
commit 8d3e501502
1 changed files with 8 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
docs/topics/auth.txt
View File

@ -1450,7 +1450,7 @@ The permission_required decorator
Limiting access to generic views Limiting access to generic views
-------------------------------- --------------------------------
To limit access to a :doc:`class-based generic view To limit access to a :doc:`class-based generic view
</ref/class-based-views/index>`, decorate the :meth:`View.dispatch </ref/class-based-views/index>`, decorate the :meth:`View.dispatch
<django.views.generic.base.View.dispatch>` method on the class. See <django.views.generic.base.View.dispatch>` method on the class. See
:ref:`decorating-class-based-views` for details. :ref:`decorating-class-based-views` for details.
@ -1476,12 +1476,13 @@ The Django admin site uses permissions as follows:
* Access to delete an object is limited to users with the "delete" * Access to delete an object is limited to users with the "delete"
permission for that type of object. permission for that type of object.
Permissions are set globally per type of object, not per specific object Permissions can be set not only per type of object, but also per specific
instance. For example, it's possible to say "Mary may change news stories," but object instance. By using the
it's not currently possible to say "Mary may change news stories, but only the :meth:`~django.contrib.admin.ModelAdmin.has_add_permission`,
ones she created herself" or "Mary may only change news stories that have a :meth:`~django.contrib.admin.ModelAdmin.has_change_permission` and
certain status, publication date or ID." The latter functionality is something :meth:`~django.contrib.admin.ModelAdmin.has_delete_permission` methods provided
Django developers are currently discussing. by the :class:`~django.contrib.admin.ModelAdmin` class, it is possible to
customize permissions for different object instances of the same type.
Default permissions Default permissions
------------------- -------------------