#14370: Adding support for Autocomplete in contrib.admin
-------------------------------------+-------------------------------------
     Reporter:  tyrion               |                    Owner:  codingjoe
         Type:  New feature          |                   Status:  assigned
    Component:  contrib.admin        |                  Version:  master
     Severity:  Normal               |               Resolution:
     Keywords:  autocomplete,        |             Triage Stage:  Accepted
  jquery, javascript, widgets,       |
  admin                              |
    Has patch:  1                    |      Needs documentation:  0
  Needs tests:  0                    |  Patch needs improvement:  0
Easy pickings:  0                    |                    UI/UX:  1
-------------------------------------+-------------------------------------

Comment (by yeago):

 I'd like to raise something else for discussion...

 Regarding permission checks, I think matching the way raw_id_fields would
 just be building in unwanted limitations in many cases. Firstly, the
 permission says 'change' where no change is occurring. It just seemed like
 the original implementation was taking a short-cut by using that
 permission (since it was effectively a pop-out changeview).

 In many cases, someone may want to grant access to a form that has an
 autocomplete list of users but that doesn't mean they want to grant change
 access to their user list. Moreover, we're already granting a permission
 when we are allowing access to the admin form the autocomplete would be
 used on. I'm not sure what case we are covering by granting access to a
 form but not granting access to the autocomplete we explicitly added.

--
Ticket URL: <https://code.djangoproject.com/ticket/14370#comment:50>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/064.2c469a1056351426a6f2b10842af63c8%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to