#36843: RenamePermission might operate on unrelated models
---------------------------------+---------------------------------------
     Reporter:  Jacob Walls      |                    Owner:  Jacob Walls
         Type:  Bug              |                   Status:  assigned
    Component:  contrib.auth     |                  Version:  6.0
     Severity:  Release blocker  |               Resolution:
     Keywords:                   |             Triage Stage:  Accepted
    Has patch:  1                |      Needs documentation:  0
  Needs tests:  0                |  Patch needs improvement:  0
Easy pickings:  0                |                    UI/UX:  0
---------------------------------+---------------------------------------
Changes (by Natalia Bidart):

 * stage:  Unreviewed => Accepted

Comment:

 I can confirm the described problem. After following the steps, I get:
 {{{
 django-postgis=# select * from django_content_type where model ilike
 '%son%';
  id | app_label |    model
 ----+-----------+-------------
  60 | testapp   | songprofile
  59 | testapp   | son
 (2 rows)

 django-postgis=# select * from auth_permission where content_type_id in
 (60, 59);
  id  |          name           | content_type_id |      codename
 -----+-------------------------+-----------------+--------------------
  233 | Can add son             |              59 | add_son
  234 | Can change son          |              59 | change_son
  235 | Can delete son          |              59 | delete_son
  236 | Can view son            |              59 | view_son
  237 | Can add son             |              60 | add_son
  238 | Can change son          |              60 | change_son
  239 | Can delete son          |              60 | delete_son
  240 | Can view son            |              60 | view_son
  241 | Can add song profile    |              60 | add_songprofile
  242 | Can change song profile |              60 | change_songprofile
  243 | Can delete song profile |              60 | delete_songprofile
  244 | Can view song profile   |              60 | view_songprofile
 (12 rows)
 }}}

 And the user that originally got a view perm for songprofile, can now view
 son instances.
-- 
Ticket URL: <https://code.djangoproject.com/ticket/36843#comment:4>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion visit 
https://groups.google.com/d/msgid/django-updates/0107019b8fa8c007-096bd98a-2737-40ce-b78a-1bc8bbcaa84b-000000%40eu-central-1.amazonses.com.

Reply via email to