search

jrief / djangocms-cascade

Build Single Page Applications using the Django-CMS plugin system
MIT License
165 stars 85 forks source link

Plugin Permissions #169

Closed darbula closed 7 years ago

darbula commented 8 years ago

It is not clear what is the right procedure for adding permissions to non superusers to let them edit plugins. Currently cms.utils.permissions.has_plugin_permission is checking if user has certain permission, i.e. cmsplugin_cascade.change_bootstrappicturepluginmodel, and returning False.

jrief commented 8 years ago

do fine grained do you need permissions? On the plugin-level, or is it enough on a group of plugins, say all Bootstrap plugins. Can you give me an example of what should be possible and what should be forbidden for a small set of users.

darbula commented 8 years ago

Currently I need just to allow regular non superusers to add, change and delete all cascade bootstrap plugins, so it is definitely on the group-of-plugins level.

OTH it is not difficult to imagine situations in which plugin level is needed, although page level permissions and cms placeholder config can help a lot in such usecases.

jrief commented 8 years ago

But they are staff users, do they?

darbula commented 8 years ago

Yes, they are.

rfleschenberg commented 8 years ago

I'll take a look at this ASAP.

jrief commented 7 years ago

Fine grained permissions have been added into version 0.12