Skip to content

Commit

Permalink
Fixed #17131 - Added per object permission notes to docs.
Browse files Browse the repository at this point in the history
Thanks dchandek for the suggestion and mateusgondim for the patch.
  • Loading branch information
timgraham committed Jul 30, 2012
1 parent 4129201 commit 8d3e501
Showing 1 changed file with 8 additions and 7 deletions.
15 changes: 8 additions & 7 deletions docs/topics/auth.txt
Expand Up @@ -1450,7 +1450,7 @@ The permission_required decorator
Limiting access to generic views
--------------------------------

To limit access to a :doc:`class-based generic view
To limit access to a :doc:`class-based generic view
</ref/class-based-views/index>`, decorate the :meth:`View.dispatch
<django.views.generic.base.View.dispatch>` method on the class. See
:ref:`decorating-class-based-views` for details.
Expand All @@ -1476,12 +1476,13 @@ The Django admin site uses permissions as follows:
* Access to delete an object is limited to users with the "delete"
permission for that type of object.

Permissions are set globally per type of object, not per specific object
instance. For example, it's possible to say "Mary may change news stories," but
it's not currently possible to say "Mary may change news stories, but only the
ones she created herself" or "Mary may only change news stories that have a
certain status, publication date or ID." The latter functionality is something
Django developers are currently discussing.
Permissions can be set not only per type of object, but also per specific
object instance. By using the
:meth:`~django.contrib.admin.ModelAdmin.has_add_permission`,
:meth:`~django.contrib.admin.ModelAdmin.has_change_permission` and
:meth:`~django.contrib.admin.ModelAdmin.has_delete_permission` methods provided
by the :class:`~django.contrib.admin.ModelAdmin` class, it is possible to
customize permissions for different object instances of the same type.

Default permissions
-------------------
Expand Down

0 comments on commit 8d3e501

Please sign in to comment.