Hi,

  During reading and playing with django tutorials and documents, I've
found that every user who has modify / delete permission can modify /
delete items other user had created.
  It may be acceptable in some situations but there is other situations
that users should modify / delete items of their own like portals.
  So, followings are my suggestion...

  If model has one-to-many relationship referring user id field, item
of that model belongs to user who created and no one else can modify /
delete that item in admin mode. List_object view should list user's own
items only.
  If model has one-to-many relationship referring group id field, item
of that model belings to that group of users so member of that group
can modify / delete that item.

  (This is separate request) Group has anonymous argument and when
given true value, history does not record who changed that item. <-
this is for discussion of matters, frankly and secretely. ;)

  Django is really great. Sorry for not implementing what I've
suggested. I really would like to, if I could do.

  Suhku.

Reply via email to