Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

authorization scheme for permissions to edit collections and icons #2

Open
ischneider opened this issue Jan 13, 2015 · 0 comments
Open

Comments

@ischneider
Copy link
Member

Proposed:

add the following fields (where user_model = settings.AUTH_USER_MODEL)

IconData
editor = ForeignKey(user_model)

Icon
creator = ForeignKey(user_model)

Collection
members = ManyToMany(user_model)

Default authorization rules:

  • user is superuser
  • user is creator of Icon or IconData.icon
  • user is in Icon or IconData.icon Collection.members

The authorization module should be swappable to allow downstream projects to do as they see fit.

@ischneider ischneider self-assigned this Jan 13, 2015
@ischneider ischneider mentioned this issue Jan 13, 2015
5 tasks
@lhcramer lhcramer assigned emilyashley and unassigned ischneider Oct 18, 2017
@emilyashley emilyashley removed their assignment Apr 20, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants