Ticket #13664: add_permission_checks_to_admin_site.patch

django/django/contrib/admin/sites.py

@@ -229 +229 @@
         return self.get_urls(), self.app_name, self.name
     urls = property(urls)
 
+    def _has_permission(self, model, perm, *args):
+        if not isinstance(model, ModelBase):
+            from django.db.models import get_model
+
+            app_label, model_name = model.split('.')
+            model = get_model(app_label, model_name)
+
+        try:
+            admin = self._registry[model]
+        except KeyError:
+            return False
+
+        return getattr(admin, 'has_%s_permission' % perm)(*args)
+
+    def has_add_permission(self, request, model):
+        return self._has_permission(model, 'add', request)
+
+    def has_change_permission(self, request, model, obj=None):
+        return self._has_permission(model, 'change', request, obj)
+
+    def has_delete_permission(self, request, model, obj=None):
+        return self._has_permission(model, 'delete', request, obj)
+
     def password_change(self, request):
         """
         Handles the "change password" task -- both form display and validation.