On Fri, Mar 4, 2011 at 1:51 AM, hdknr <hidelafog...@gmail.com> wrote: > Hello, > > I'm customizing admin UI to add extra menus but I found it is not > easy. So thinking of adding "admin" to model_dict in index() and > app_index() ( source:django/trunk/django/contrib/admin/sites.py ) to > refere to ModeAdmin objects in templates. > Is there any pitfall in the security point of view ? >
The admin is a wonderful thing. It certainly provides more than adequate tools for many situations. It provides for certain easy customizations. But if you find yourself wanting to go far outside its design philosophy, perhaps you should be considering writing your own, separate, view. You can still do whatever permissions checking you need, display whatever forms, etc., that you want, and your code will not require changes to keep in step with an advancing admin API if you upgrade to some future version of Django. That's not to say that the admin API may not someday directly support the features you need, but if it doesn't now, then you must consider where to best invest your effort. Bill -- You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send email to django-users@googlegroups.com. To unsubscribe from this group, send email to django-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/django-users?hl=en.
