mirror of
https://github.com/jazzband/django-admin2.git
synced 2026-03-27 03:20:26 +00:00
correcting issue with action permissions #161
This commit is contained in:
parent
4fb43db3e8
commit
1c503be2d8
1 changed files with 7 additions and 2 deletions
|
|
@ -43,7 +43,7 @@ class BaseListAction(object):
|
|||
|
||||
@property
|
||||
def permission_name(self):
|
||||
return NotImplemented
|
||||
return None
|
||||
|
||||
def description(self):
|
||||
return NotImplemented
|
||||
|
|
@ -55,7 +55,7 @@ class BaseListAction(object):
|
|||
return NotImplemented
|
||||
|
||||
def __call__(self):
|
||||
if not self.request.user.has_perm(self.permission_name):
|
||||
if self.permission_name and not self.request.user.has_perm(self.permission_name):
|
||||
message = _("Permission to '%s' denied" % force_text(self.description))
|
||||
messages.add_message(self.request, messages.INFO, message)
|
||||
return None
|
||||
|
|
@ -75,6 +75,11 @@ class DeleteSelectedAction(BaseListAction):
|
|||
# TODO - power this off the ADMIN2_THEME_DIRECTORY setting
|
||||
template = "admin2/bootstrap/actions/delete_selected_confirmation.html"
|
||||
|
||||
@property
|
||||
def permission_name(self):
|
||||
return '%s.delete.%s' \
|
||||
% (self.options.app_label, self.options.object_name.lower())
|
||||
|
||||
def get_response(self):
|
||||
if self.request.POST.get('confirmed'):
|
||||
# The user has confirmed that they want to delete the objects.
|
||||
|
|
|
|||
Loading…
Reference in a new issue