On Aug 20, 2007, at 6:41 PM, Catriona wrote:
>
> Hello
>
> Is there a way to implement row level security where a user can
> determine who can do what to particular records - ie invoices? The
> default would be full access only to the creater.
>
> I am looking at implementing a ContactInvoiveRole table but wonder if
> this is the way to go.
>

Personally, I would add a "creator" to the invoice model and check is  
user == creator before allowing any writes. Keep it simple and all that.

Besides, you probably want to know the creator anyways.


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-users@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to