Telemeta
Telemeta copied to clipboard
Parisson
User permissions
When a user « Can add a collection » without the permission « Can change collection », he cannot save the collection...
The fact is that multiple .save() (which are linked to the "change" permission) are done on some objects after creation. Then both of the rules need to be applied to allow object creation.
I wish separate management of the addition and modification of the collections ... it's not that bad as it is, but it leaves the inconsistencies if we add a collection and cannot save it...
In fact, it is desirable to have a management of collections and items related to the user: the user who creates a collection is the only one which may change it : he is responsible of it, and another unauthorized user, who manages others collections, cannot modify it.
I agree with this approach although it should be an option... Editing restrictions to the creator need some migrations of the models and will be added after the 1.6 release.