Add custom permissions to allow/prevent user from exporting data

[mick88]

I propose adding a per-model permission that would control which users can export data. Import should already be controlled by "create" permission, but at the moment there's no mechanic in place to prevent the user from exporting all data to a file.

[beruic]

How about edit?

[mick88]

Sorry, can you be more specific with your response?

[beruic]

Yes, sorry. how about the change (not edit, sorry) permission. Won't that do the job?

[mick88]

No, it controls whether user can edit the object. Export is much too different. Anyway, I think I will implement this as it's a requirement on my project, and submit a PR.

[Javieracost]

Hey there, I had a similar case where I needed to control which users were allowed to import data. One solution to this is to override the modelAdmin's changelist_view method (which has access to the request object) to pass the necessary information to the extra_context dict . Then you can point the change_list_template attribute to a template where you can render the import/export buttons only if the required conditions are met.

{% extends 'admin/import_export/change_list.html' %}
{% block object-tools-items %}
	{% if import_allowed %}
		{% comment %}
			Should probably be 
			{% include "admin/import_export/change_list_import_item.html" %}
			but doesnt add the right class to the button so I do it myself
		{% endcomment %}
		<a class="btn" href='{% url opts|admin_urlname:"import" %}'>{% trans "Import" %}</a>
	{% endif %}
	{{ block.super }}
{% endblock %}

Anyway, it'd be so much better to have has_(import|export)_permission methods to implement on the modelAdmin instead!

[mick88]

Sorry, I forgot about this issue. I implemented permissions a while ago on my fork. The implementation does not just hide the export button, but also checks permission when exporting.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.