I'm working on an online newsroom project and have a need to extend the user profile beyond the included basics. I also need to grant permissions to allow the online editorial staff to create new user accounts to associate with new content if the account doesn't already exist. In most cases there is no need for regular staff to login to the site, but this could change in the future and I'm thinking it may be a good idea to have those accounts in place from the beginning instead of trying to create them later.
Right now, I have a UserProfile model that is linked to the built-in User model for inline editing in the admin interface so that all of the extended info can be added/edited along with the default userid, name, password, etc. The problem I am running into is that I don't want to give online editorial staff the ability to grant "staff" or superuser access when they create new accounts. If I use the built-in admin interface, this seems inevitable. I can collapse those options so they aren't immediately visible, but that just obscures the option a bit. On the other hand, I could keep the built-in User model separate from UserProfile and allow online staff to create UserProfiles for news staff and only create accounts for those who absolutely need them. The problem there is that if I need to create User accounts I will end up duplicating information such as name, userid, etc. in a different table. My questions are... 1. Is there a way to use the built-in Admin interface but restrict granting superuser permissions? 2. Is there a way to create new User accounts by using UserProfile to select existing userids and prepopulating the name and email address fields? I imagine custom forms may allow me to do exactly what I need, but I have no experience using them and want to make sure I can't do what I need with the built-in Admin interface before moving into custom forms. Thoughts? --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send email to django-users@googlegroups.com To unsubscribe from this group, send email to django-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/django-users?hl=en -~----------~----~----~----~------~----~------~--~---