As a user, I can use django-admin to manage object-level permissions and read data from other models - Githubissues

pulp / pulpcore

Pulp 3 pulpcore package https://pypi.org/project/pulpcore/

GNU General Public License v2.0

301 stars 116 forks source link

As a user, I can use django-admin to manage object-level permissions and read data from other models #1923

Closed pulpbot closed 2 years ago

pulpbot commented 2 years ago

Author: @bmbouter (bmbouter)

Redmine Issue: 7336, https://pulp.plan.io/issues/7336

Background

Administrators and developers have expressed desire to read Pulp data using django-admin.
Additionally, RBAC features of Pulp need an easy way for users to view/manage object-level permissions for Pulp data and django-admin provides that.

Solution

3.6 Already enabled django-admin at /admin/ so now we need to expand the models that are available there. Specifically we need to:

Add all the pulpcore objects
Ensure each does not allow data to be added or modified, only read
Ensure each object that meaningfully uses object-level permissions inherits from or uses GuardedModelAdmin from django-guardian.

bmbouter commented 2 years ago

We're no longer using django-admin as the method to manage object-level permissions. Instead the RBAC-enabled endpoints will have their own permissions endpoints.