Opened 6 years ago
Closed 6 years ago
#29475 closed Bug (duplicate)
Only the change permission allows reading data
| Reported by: | James Howe | Owned by: | nobody |
|---|---|---|---|
| Component: | contrib.admin | Version: | 1.11 |
| Severity: | Normal | Keywords: | security permissions |
| Cc: | Triage Stage: | Unreviewed | |
| Has patch: | no | Needs documentation: | no |
| Needs tests: | no | Patch needs improvement: | no |
| Easy pickings: | no | UI/UX: | no |
Description
This is a big problem as there's no separate view permission.
I want a set of admins to be able to view and delete objects, but not edit or add new ones.
However, if only the delete permission is given, there's no way to find or list the objects in the first place.
Change History (2)
comment:1 by , 6 years ago
| Keywords: | security added; securoty removed |
|---|
comment:2 by , 6 years ago
| Resolution: | → duplicate |
|---|---|
| Status: | new → closed |
Note:
See TracTickets
for help on using tickets.
Duplicate of #8936 (fixed in Django 2.1).