Django

Code

Ticket #6819 (closed: fixed)

Opened 9 months ago

Last modified 6 months ago

[newforms-admin] Delete view raises 403 after deletion by user with only delete permission

Reported by: rmyers Assigned to: rmyers
Milestone: Component: django.contrib.admin
Version: newforms-admin Keywords:
Cc: Triage Stage: Unreviewed
Has patch: 1 Needs documentation: 0
Needs tests: 0 Patch needs improvement: 0

Description

If you attempt to delete an object of a type where you only have delete permissions for you are redirected to the change list view, which raises a 403.

Attachments

6819.patch (0.8 kB) - added by rmyers on 03/18/08 13:02:52.

Change History

03/18/08 13:02:52 changed by rmyers

  • attachment 6819.patch added.

03/18/08 13:03:16 changed by Alex

  • needs_better_patch changed.
  • has_patch set to 1.
  • needs_tests changed.
  • needs_docs changed.

06/07/08 18:05:58 changed by brosner

  • status changed from new to closed.
  • resolution set to fixed.

(In [7588]) newforms-admin: Fixed #6819 -- When the user does not have change permission avoid redirecting to the changelist view after deleting an object. Thanks rmyers!

Add/Change #6819 ([newforms-admin] Delete view raises 403 after deletion by user with only delete permission)




Change Properties
Action