Databases
StackOverflow2013
Postsdbo
POPermissions for a site only
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POPermissions for a site only
    primarykey
    data
    text
    <p>I have a multilingual Django project. Every language is a different subdomain. So we've decided to use the "sites" application and to create one different site for every language.</p> <p>On that project, I also have a "pages" application, which is quite similar to a CMS. The user can create pages with content and they'll be displayed in the appropriate language site.</p> <p>Now I'm looking to be able to manage advanced permissions. What I need to do is to allow, in the admin application a user only to create and update pages for one (or many) specific language/site.</p> <p>What'd be the cleaner way to do something like that ?</p> <p><strong>Edit : Here is the solution I've adapted, given by Chris</strong></p> <p>I create a decorator that's checking if the user is appropriately in the group that has access to the lang. See Chris' accepted answer for an example of this.</p> <p>In a "normal" view, I do the following :</p> <pre><code>def view(self): # Whatever you wanna do return render_to_response('page.html', {}, RequestContext(request)) view = group_required(view) </code></pre> <p>If the user is in the group, it'll return the method. Otherwise, it'll return an "Access Denied" error.</p> <p>And in my admin, I do the following :</p> <pre><code>class PageAdmin(admin.ModelAdmin): list_display = ('title', 'published') fieldsets = [ (None, {'fields': ['title', 'slug', 'whatever_field_you_have']}), ] def has_add_permission(self, request): return in_group_required(request) admin.site.register(Page, PageAdmin) </code></pre> <p>Where the in_group_required is a similar method to group_required mentionned above. But will return only true or false depending of if we have access or not.</p> <p>And because we use them quite much in the previous examples, you'll find above here what I have in my in_group and group_required methods.</p> <pre><code>def group_required(func): def _decorator(request, *args, **kwargs): if not in_group(request): return HttpResponse("Access denied") return func(*args, **kwargs) return _decorator def in_group(request): language = Language.objects.get(site__domain__exact=request.get_host()) for group in language.group.all(): if request.user in group.user_set.all(): return True return False </code></pre>
    singulars
    1. PO
      singulars
      1. PTAnswer
    1. This table or related slice is empty.
    1. PTQuestion
    1. USDamien MATHIEU
    1. USDamien MATHIEU
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PO
      singulars
      1. PTAnswer
    2. PO
      singulars
      1. PTAnswer
    3. PO
      singulars
      1. PTAnswer
    1. VO
      singulars
      1. POPermissions for a site only
      1. This table or related slice is empty.
      1. VTUpMod
    2. VO
      singulars
      1. POPermissions for a site only
      1. This table or related slice is empty.
      1. VTUpMod
    3. VO
      singulars
      1. POPermissions for a site only
      1. USLakshman Prasad
      1. VTFavorite
    1. This table or related slice is empty.
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload