Changes between Version 1 and Version 2 of Ticket #29012


Ignore:
Timestamp:
Jan 11, 2018, 11:00:52 AM (6 years ago)
Author:
Mehmet Dogan
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #29012 – Description

    v1 v2  
    1414First, and possibly the best, solution to this is that, django does not deny permission if obj argument is provided, but just ignores it. This way by properly ordering backends in the settings, it could be a fallback solution for the lower level checkers. This might be the move in the right direction, although it is backwards incompatible.
    1515
    16 A second solution is a keyword argument, such as fallback_to_model=False, that will allow lower-level checkers mimic the model level permissions that django does. Although this looks not DRY at first, it would give other backends more control whether to fallback to django or not (in case first solution is also accepted of course, otherwise, this is needed to get the necessary permissions with one round of polling).
     16A second solution is a keyword argument, such as fallback_to_model=False, that will allow lower-level checkers mimic the model level permissions that django does. If the first solution is not accepted, this is needed to get the necessary permissions with one round of polling. Otherwise, it seems like it is still a useful addition since it would allow backends to prefer to handle the fallback by themselves.
    1717
Back to Top