The SIO2 project
  1. The SIO2 project
  2. SIO-1704

Custom ModelAdmin class doesn't check related objects permissions

    Details

    • Type: Bug Bug
    • Status: Resolved Resolved
    • Priority: Major Major
    • Resolution: Obsolete
    • Affects Version/s: Current Version
    • Fix Version/s: None
    • Component/s: OIOIOI
    • Labels:
      None

      Description

      OIOIOI's ModelAdmin overrides delete_view() implementation. It's very similar to that of Django, but it only checks delete permissions of the object being deleted. If a delete cascade occurs there can be an object that is protected or shouldn't be deleted anyway.

        Activity

        Connect your code to JIRA

        Link every code change to JIRA just by adding an issue keys in commit messages. Bridge the gap back to your source and know which changes fixed which JIRA issues.

        Git & Mercurial in the cloud

        Collaborate across unlimited private code repositories.

        Git behind the firewall

        Manage and collaborate on Git repositories behind a firewall.

        Browse and search code

        Browse, search, and track source code repositories.

          People

          • Assignee:
            Szymon AcedaƄski
            Reporter:
            Adam Paszke
          • Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: