jasonsebastian / su-entry-task

NTU Student Union IT Entry Task
0 stars 0 forks source link

Pake blogs_admin model instead of staff_member_required #5

Open kwinata opened 5 years ago

kwinata commented 5 years ago

https://github.com/jasonsebastian/su-entry-task/blob/43da69ece61fd08993d42dfb54bd3953a165640f/blogs/views.py#L1

Supaya bisa control access control nya lebih bagus, bkin admin panelnya jgn pake staff_member, karena dia bakal bisa access django admin juga. Preferably bkin model baru yg namanya blogs_admin di blogs app atau mungkin bisa tambah attribute di blogs_user model

jasonsebastian commented 5 years ago

oke kev noted. tapi setau gw staff_member gabisa access admin panel, yang bisa access admin panel itu superuser

kwinata commented 5 years ago

oh iya, staff bisa access django admin panel, tapi belom tentu dapat permission buat ngapa"in https://stackoverflow.com/questions/20469174/whats-the-difference-between-staff-admin-superuser-in-django biasa jarang pakai sih, karena kita juga ga mau pake interface admin default nya django, jadi permissionnya bakal pake yg kita buat sendiri (role based)