I'm working on an online newsroom project and have a need to extend the
user profile beyond the included basics. I also need to grant
permissions to allow the online editorial staff to create new user
accounts to associate with new content if the account doesn't already
exist. In most cases there is no need for regular staff to login to the
site, but this could change in the future and I'm thinking it may be a
good idea to have those accounts in place from the beginning instead of
trying to create them later.

Right now, I have a UserProfile model that is linked to the built-in
User model for inline editing in the admin interface so that all of the
extended info can be added/edited along with the default userid, name,
password, etc.

The problem I am running into is that I don't want to give online
editorial staff the ability to grant "staff" or superuser access when
they create new accounts. If I use the built-in admin interface, this
seems inevitable. I can collapse those options so they aren't
immediately visible, but that just obscures the option a bit.

On the other hand, I could keep the built-in User model separate from
UserProfile and allow online staff to create UserProfiles for news staff
and only create accounts for those who absolutely need them. The problem
there is that if I need to create User accounts I will end up
duplicating information such as name, userid, etc. in a different table.

My questions are...

1. Is there a way to use the built-in Admin interface but restrict
granting superuser permissions?

2. Is there a way to create new User accounts by using UserProfile to
select existing userids and prepopulating the name and email address fields?

I imagine custom forms may allow me to do exactly what I need, but I
have no experience using them and want to make sure I can't do what I
need with the built-in Admin interface before moving into custom forms.
Thoughts?

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-users@googlegroups.com
To unsubscribe from this group, send email to 
django-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to