The SIO2 project
  1. The SIO2 project
  2. SIO-1704

Custom ModelAdmin class doesn't check related objects permissions

    Details

    • Type: Bug Bug
    • Status: Resolved Resolved
    • Priority: Major Major
    • Resolution: Obsolete
    • Affects Version/s: Current Version
    • Fix Version/s: None
    • Component/s: OIOIOI
    • Labels:
      None

      Description

      OIOIOI's ModelAdmin overrides delete_view() implementation. It's very similar to that of Django, but it only checks delete permissions of the object being deleted. If a delete cascade occurs there can be an object that is protected or shouldn't be deleted anyway.

        Activity

        Hide
        Szymon Acedański added a comment -
        This issue has been automatically closed as Obsolete due to no activity for 365 days.

        Feel free to reopen it or create a new one if it's still relevant.
        Show
        Szymon Acedański added a comment - This issue has been automatically closed as Obsolete due to no activity for 365 days. Feel free to reopen it or create a new one if it's still relevant.

          People

          • Assignee:
            Szymon Acedański
            Reporter:
            Adam Paszke
          • Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: