On 7 Mar 2008, at 11:50 am, fizban wrote:
> > Hello, > > I'm doing my first complex django based application (actually a > website), I started doing it in PHP but it really bored me having to > deal with a huge amount of forms.. so I decided to go for the good old > django. I'm not new to Django, but I've only created "basic" projects > with it (CMS, Weblogs, easy things like those). > > I'm looking for suggestions from more skilled django'ers :) > > What I'm trying to do now is a "last minute"-like website. My customer > will need to serve tour operators, letting them to register and add > "last minute" packages to be sold to the end users on his website (the > one I'm creating here). > > A last minute is identified by a lot of stuff, so I'll end up with a > lot of "edit_inline" inside the model. It wouldn't be a problem if I > could let "tour operators" to use the admin interface (I'd just set > their permissions to add/edit/delete a last minute package, however > it's not clear to me if there's any way to have more granular > permissions. I surely don't want various tour operator to be able to > add/edit/delete packages by other tour operators, but I have no idea > on how to enforce such a policy via the admin area (a tour operator is > only able to view, add, edit, delete packages created by him/herself > and to edit his own profile). > > I'm not sure if there's any way for me to do it via the admin > interface, or if I'd need to go with newforms, templates and a custom > manager > > Could anyone give me an hint or two on the matter? I haven't been able > to find any example like this on the net so far. There used to be a branch of django that did per-object permissions [0], which sounds like what you want, however, I don't think it's actively worked on nowadays. You'll probably have to roll your own admin system where you can enforce this the per row permissions. 0 - http://code.djangoproject.com/svn/django/branches/per-object- permissions/ -- David Reynolds [EMAIL PROTECTED] --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send email to django-users@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/django-users?hl=en -~----------~----~----~----~------~----~------~--~---
