Actions
Story #7633
closedPulp - Story #7338: [Epic] As a user, I have pulpcore enforcing Role Based Access Control
Pulp - Story #7336: As a user, I can use django-admin to manage object-level permissions and read data from other models
As a user, I can use django-admin to manage object-level permissions and read data from other models
Status:
CLOSED - DUPLICATE
Priority:
Normal
Assignee:
-
Sprint/Milestone:
-
Start date:
Due date:
% Done:
0%
Estimated time:
Platform Release:
Groomed:
No
Sprint Candidate:
No
Tags:
Sprint:
Quarter:
Description
Ticket moved to GitHub: "pulp/pulp_ansible/713":https://github.com/pulp/pulp_ansible/issues/713
Background¶
- Administrators and developers have expressed desire to read Pulp data using django-admin.
- Additionally, RBAC features of Pulp need an easy way for users to view/manage object-level permissions for Pulp data and django-admin provides that.
Solution¶
3.6 Already enabled django-admin at /admin/
so now we need to expand the models that are available there. Specifically we need to:
- Add all the pulpcore objects
- Ensure each does not allow data to be added or modified, only read
- Ensure each object that meaningfully uses object-level permissions inherits from or uses
GuardedModelAdmin
from django-guardian.
Actions