Opened 6 years ago
Last modified 6 years ago
#29969 new Bug
Admin inline with view permission is shown when save_as validation fails — at Initial Version
Reported by: | Matija Kolarić | Owned by: | nobody |
---|---|---|---|
Component: | contrib.admin | Version: | 2.1 |
Severity: | Normal | Keywords: | |
Cc: | Triage Stage: | Accepted | |
Has patch: | no | Needs documentation: | no |
Needs tests: | no | Patch needs improvement: | no |
Easy pickings: | no | UI/UX: | no |
Description
How to reproduce:
Make a modeladmin with save_as=True, and one unique field, with an inline where the user only has 'view' permission.
Create an instance. Open it, press "save as new". This will result in the validation error, as it should, but the inline is shown as editable with 3 extra fields (ignoring the actual extra setting).
If the unique field is changed, even if the data is entered in the inline form, nothing is saved (so there is no security issue, it just looks bad).