Opened 23 months ago

Last modified 23 months ago

#34301 closed Bug

"show_save_as_new" in admin can add without this permission — at Initial Version

Reported by: Equipe de TI da Zara Falcão Owned by: nobody
Component: contrib.admin Version: 4.1
Severity: Normal Keywords: save_as
Cc: Carlton Gibson Triage Stage: Ready for checkin
Has patch: yes Needs documentation: no
Needs tests: no Patch needs improvement: no
Easy pickings: yes UI/UX: no

Description

At "django/contrib/admin/templatetags/admin_modify.py" file, line 102, I think you must put one more verification for this tag: "and has_add_permission", because "save_as_new" is a add modification.

I rewrite this for my project:
"

"show_save_as_new": not is_popup
and has_add_permission # This line that I put!!!
and has_change_permission
and change
and save_as,

"

Change History (0)

Note: See TracTickets for help on using tickets.
Back to Top