On Feb 17, 11:53 pm, Jacek Furmankiewicz <jace...@gmail.com> wrote: > We have a use where we need to limit access to particular *instances* > of objects. > It's not a simple case of add/delete/update permissions. > > Let's say a sales rep has his 5 customer he is responsible. > In the customer admin he should only see those 5 and no others. > Also, in all other admin screens (e.g. orders/sales, invoices) he > should only see the ones for the 5 customers he has access to. > > Is there some generic way in Django admin to do this? Or would we need > to code this by hand on every screen, override every default admin > template (e.g. for the Filter section), etc. >
Django 1.2 provides a-minima support for row-level permissions - or more exactly, it provides the needed interface, you'll still have to write the backend (I wrote one for my current project, but it ended up not being used that much, so I can't say it's really bulletproof). I didn't have time yet to check how well it worked with the admin but I wouldn't hope too much at this stage - I guess you'll have to override at least parts of the admin. -- You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send email to django-us...@googlegroups.com. To unsubscribe from this group, send email to django-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/django-users?hl=en.
