How to limit fields in django-admin depending on user?

后端 未结 4 1399
無奈伤痛
無奈伤痛 2020-12-24 12:56

I suppose similar problem would have been discussed here, but I couldn\'t find it.

Let\'s suppose I have an Editor and a Supervisor. I want the Editor to be able to

4条回答
  •  北海茫月
    2020-12-24 13:12

    I think there is a more easy way to do that:

    Guest we have the same problem of Blog-Post

    blog/models.py:

    Class Blog(models.Model):
         ...
         #fields like autor, title, stuff..
         ...
    
    class Post(models.Model):
         ...
         #fields like blog, title, stuff..
         ...
         approved = models.BooleanField(default=False)
         approved_by = models.ForeignKey(User) 
         class Meta:
             permissions = (
                 ("can_approve_post", "Can approve post"),
             )
    

    And the magic is in the admin:

    blog/admin.py:

    ...
    from django.views.decorators.csrf import csrf_protect
    ...
    def has_approval_permission(request, obj=None):
         if request.user.has_perm('blog.can_approve_post'):
             return True
         return False
    
    Class PostAdmin(admin.ModelAdmin):
         @csrf_protect
         def changelist_view(self, request, extra_context=None):
             if not has_approval_permission(request):
                 self.list_display = [...] # list of fields to show if user can't approve the post
                 self.editable = [...]
             else:
                 self.list_display = [...] # list of fields to show if user can approve the post
             return super(PostAdmin, self).changelist_view(request, extra_context)
         def get_form(self, request, obj=None, **kwargs):
             if not has_approval_permission(request, obj):
                 self.fields = [...] # same thing
             else:
                 self.fields = ['approved']
             return super(PostAdmin, self).get_form(request, obj, **kwargs)
    

    In this way you can use the api of custom permission in django, and you can override the methods for save the model or get the queryset if you have to. In the methid has_approval_permission you can define the logic of when the user can or can't to do something.

提交回复
热议问题