Ticket #13576: django_contrib_admin_actions-fix-perms-check-bug.diff

actions.py

@@ -27 +27 @@
     app_label = opts.app_label
 
     # Check that the user has delete permission for the actual model
-    if not modeladmin.has_delete_permission(request):
-        raise PermissionDenied
+    for obj in queryset:
+        if not modeladmin.has_delete_permission(request, obj):
+            raise PermissionDenied
 
     # Populate deletable_objects, a data structure of all related objects that
     # will also be deleted.