From fa6577f5b2af9848b661fc24719b59e07d214728 Mon Sep 17 00:00:00 2001 From: Tim Graham Date: Mon, 30 Jul 2012 16:16:11 -0400 Subject: [PATCH] Fixed #17131 - Added per object permission notes to docs. Thanks dchandek for the suggestion and mateusgondim for the patch. Backport of 8d3e501502c308cbdd3cc95b62ace0fe11d373ab from master --- docs/topics/auth.txt | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/docs/topics/auth.txt b/docs/topics/auth.txt index 4b0b0fc8a4..534297279a 100644 --- a/docs/topics/auth.txt +++ b/docs/topics/auth.txt @@ -1508,12 +1508,13 @@ The Django admin site uses permissions as follows: * Access to delete an object is limited to users with the "delete" permission for that type of object. -Permissions are set globally per type of object, not per specific object -instance. For example, it's possible to say "Mary may change news stories," but -it's not currently possible to say "Mary may change news stories, but only the -ones she created herself" or "Mary may only change news stories that have a -certain status, publication date or ID." The latter functionality is something -Django developers are currently discussing. +Permissions can be set not only per type of object, but also per specific +object instance. By using the +:meth:`~django.contrib.admin.ModelAdmin.has_add_permission`, +:meth:`~django.contrib.admin.ModelAdmin.has_change_permission` and +:meth:`~django.contrib.admin.ModelAdmin.has_delete_permission` methods provided +by the :class:`~django.contrib.admin.ModelAdmin` class, it is possible to +customize permissions for different object instances of the same type. Default permissions -------------------