#29502: AutocompleteJsonView doesn't work if user has "view" but not "change"
---------------------------------+------------------------------------
     Reporter:  Matthew Frazier  |                    Owner:  nobody
         Type:  Bug              |                   Status:  new
    Component:  contrib.admin    |                  Version:  2.1
     Severity:  Release blocker  |               Resolution:
     Keywords:                   |             Triage Stage:  Accepted
    Has patch:  0                |      Needs documentation:  0
  Needs tests:  0                |  Patch needs improvement:  0
Easy pickings:  1                |                    UI/UX:  0
---------------------------------+------------------------------------
Changes (by Carlton Gibson):

 * severity:  Normal => Release blocker
 * stage:  Unreviewed => Accepted


Comment:

 OK, yes. Thanks for the report.

 This should probably be weakened to `view` or `change`. (Although,
 `change` currently implies `view`.)

 It might be worth an addition to the `autocomplete_fields` docs, noting
 that the permission to the related object is required.
 (There's a slight inconsistency in that no permission to the related model
 is needed if you don't use autocomplete.)

-- 
Ticket URL: <https://code.djangoproject.com/ticket/29502#comment:1>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/067.fdd6945517d0bd246e7f46510e981893%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to