Default permissions created without Admin class

[sairus.nvkz@…]

I bad know english. But.
I have model:

class Settings(models.Model):

user_per_page = models.IntegerField(_('User per page'), null=False)
class Meta():

permissions = (('change_settings', 'Can change settings'),)

in docs is written:

Default permissions

---

Three basic permissions -- add, change and delete -- are automatically created
for each Django model that has a class Admin set. Behind the scenes, these
permissions are added to the auth_permission database table when you run
manage.py syncdb.

Note that if your model doesn't have class Admin set when you run
syncdb, the permissions won't be created. If you initialize your database
and add class Admin to models after the fact, you'll need to run
manage.py syncdb again. It will create any missing permissions for
all of your installed apps.

My model not have class Admin, but permissions for add,change and delete was created. Plus my custom permissions - hiccupped - four permissions.

[Jacob]

If I'm reading this ticket right, this is by design -- if you've added custom permissions, then syncdb will create them along with the standard ones.

[sairus,nvkz@…]

If I'm reading this ticket right, this is by design -- if you've added custom permissions, then syncdb will create them along with the standard ones.

I have following models.py:

from django.db import models
class Sairus(models.Model):
   pass

not class Meta, not class Admin, empty model. But permission for add, change and delete was created.

in docs - "Note that if your model doesn't have class Admin set when you run syncdb, the permissions won't be created."

I execute SQL: TRUNCATE TABLE 'auth_permission';
I run syncdb.
I view auth_permission table.
I see

+------------------------+---------------+
| name                   | codename      |
+------------------------+---------------+
| Can add sairus         | add_sairus    |
| Can change sairus      | change_sairus |
| Can delete sairus      | delete_sairus |
+------------------------+---------------+

Why?

[Jacob]

Ah, it does appear that Django is creating permissions even for classes without inner admin classes (see the post_syncdb handler in django.contrib.auth). So the question is whether we should change the behavior to match the docs, or vice versa.

[sairus,nvkz@…]

I think, docs is main. When I have Settings model (where I can only change fields (not add and not delete)), that perms for add and delete not necessary. When I have model for internal needs for my projects, that any perms not necessary.

[onno@…]

This bug is very annoying if your making a standalone application without the admin.
You might not want to give your user so many confusing options in your permissions. So a custom permissions is more simple!

[oyvind]

Fix for adding admin permissions only when a admin class is present

[James Bennett]

The docs have been updated to reflect that the permissions are created regardless of the Admin class, so I'm going to declare the design decision made, and mark this wontfix.