Re: Users can give permissions they don't have.

2014-11-17 Thread Collin Anderson
On Friday, November 14, 2014 9:25:28 PM UTC-5, RLF_UNIQUE wrote: > > I want to make a "manager" user, who has a set of permissions (less than > what I have as admin). I want "manager" to be able to create users, groups, > permissions, etc, but restrict them to ONLY the permissions they have (if I

Re: Users can give permissions they don't have.

2014-11-15 Thread RLF_UNIQUE
The problem is that's not how it's working. I create a user and they can give other users privs that they don't have. -- You received this message because you are subscribed to the Google Groups "Django users" group. To unsubscribe from this group and stop receiving emails from it, send an emai

Re: Users can give permissions they don't have.

2014-11-15 Thread Avraham Serour
yes, that seems reasonable, users that can create users can only give them permissions they also have. What's the problem? On Sat, Nov 15, 2014 at 4:25 AM, RLF_UNIQUE wrote: > I want to make a "manager" user, who has a set of permissions (less than > what I have as admin). I want "manager" to be

Users can give permissions they don't have.

2014-11-14 Thread RLF_UNIQUE
I want to make a "manager" user, who has a set of permissions (less than what I have as admin). I want "manager" to be able to create users, groups, permissions, etc, but restrict them to ONLY the permissions they have (if I give them permission to add user, they can just give new user all avail