Hi,
I hit a problem with user permissions within the Django admin area. The other
day I gave a user add/edit/delete permissions to the user object so that they
could manage staff access on the websites. However, in doing this that
particular user is now able to create other users with greater
This is not a bug. It is how the permissions system works. So far as
the Admin goes, it is model granular, not row granular or field
granular, meaning that if you grant a user full access to the User
object, as you did, they can do anything to that table, including
change permission levels
Martin Diers wrote:
> This is not a bug. It is how the permissions system works. So far as
> the Admin goes, it is model granular, not row granular or field
> granular, meaning that if you grant a user full access to the User
> object, as you did, they can do anything to that table, includin
