The SIO2 project
  1. The SIO2 project
  2. SIO-1704

Custom ModelAdmin class doesn't check related objects permissions

    Details

    • Type: Bug Bug
    • Status: Resolved Resolved
    • Priority: Major Major
    • Resolution: Obsolete
    • Affects Version/s: Current Version
    • Fix Version/s: None
    • Component/s: OIOIOI
    • Labels:
      None

      Description

      OIOIOI's ModelAdmin overrides delete_view() implementation. It's very similar to that of Django, but it only checks delete permissions of the object being deleted. If a delete cascade occurs there can be an object that is protected or shouldn't be deleted anyway.

        Activity

          People

          • Assignee:
            Szymon AcedaƄski
            Reporter:
            Adam Paszke
          • Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: