Project

Profile

Help

Story #7633

closed

Pulp - Story #7338: [Epic] As a user, I have pulpcore enforcing Role Based Access Control

Pulp - Story #7336: As a user, I can use django-admin to manage object-level permissions and read data from other models

As a user, I can use django-admin to manage object-level permissions and read data from other models

Added by fao89 over 3 years ago. Updated over 2 years ago.

Status:
CLOSED - DUPLICATE
Priority:
Normal
Assignee:
-
Sprint/Milestone:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Platform Release:
Groomed:
No
Sprint Candidate:
No
Tags:
Sprint:
Quarter:

Description

Ticket moved to GitHub: "pulp/pulp_ansible/713":https://github.com/pulp/pulp_ansible/issues/713


Background

  • Administrators and developers have expressed desire to read Pulp data using django-admin.
  • Additionally, RBAC features of Pulp need an easy way for users to view/manage object-level permissions for Pulp data and django-admin provides that.

Solution

3.6 Already enabled django-admin at /admin/ so now we need to expand the models that are available there. Specifically we need to:

  • Add all the pulpcore objects
  • Ensure each does not allow data to be added or modified, only read
  • Ensure each object that meaningfully uses object-level permissions inherits from or uses GuardedModelAdmin from django-guardian.

Also available in: Atom PDF