Context Navigation

Ticket #17905: admindocs_model_permissions.3.diff

File admindocs_model_permissions.3.diff, 1.0 KB (added by chriscohoat, 13 years ago)
Removed unnecessary import of forbidden HttpResponse. Default action raises an Http404 so that model names cannot be guessed.

diff --git a/django/contrib/admindocs/views.py b/django/contrib/admindocs/views.py
index dfd4302..33d9a7d 100644

                def view_detail(request, view):
 def model_index(request):
     if not utils.docutils_is_available:
         return missing_docutils_page(request)
     m_list = [m._meta for m in models.get_models() if request.user.has_module_perms(m._meta.app_label)]
+    m_list = [m._meta for m in models.get_models()]
     return render_to_response('admin_doc/model_index.html', {
         'root_path': urlresolvers.reverse('admin:index'),
         'models': m_list
-…
+               def model_detail(request, app_label, model_name):
     if not utils.docutils_is_available:
         return missing_docutils_page(request)
-    #Make sure user can access this model
-    if not request.user.has_module_perms(app_label):
-        raise Http404(_("App %r not found") % app_label)
     # Get the model class.
     try:
         app_mod = models.get_app(app_label)