Re: "Ownership" role for objects...

2005-10-04 Thread Jason Huggins
Joshua D. Drake wrote: > > Maybe django core doesn't need ACL's, maybe django users will need ACL's > > I don't think it is a maybe for django users/developers. If Django wants > to take off it is going to need some type of ACL otherwise people are > just going to develop their own and you will en

Re: "Ownership" role for objects...

2005-10-04 Thread Simon Willison
On 4 Oct 2005, at 16:00, Jason Huggins wrote: So... does anyone have any thoughts on how to implement "ownership" in Django? What would define "ownership"? (Any object you create and any object you're granted permissions to edit? Do we need to track ownerhip at the object level? How should

Re: "Ownership" role for objects...

2005-10-04 Thread Robert Wittams
Jason Huggins wrote: > One big thing I'm missing in Django is the concept of object > "ownership"... Here's my use case: > Lets say I have 3 users: > 1) Superuser - that's me... I can create or edit anything > 2) Bob - He only has permission to create, edit, or delete expense > reports that he own

Re: "Ownership" role for objects...

2005-10-04 Thread Joshua D. Drake
> Moreover, if you don't need a lot of permissions checking, then you just need > a few basic ACL rules to do the job. > I know I am new here but a basic ACL is pretty common place in any kind of advanced development. It just depends on where you do it. You could do it in PostgreSQL for example

Re: "Ownership" role for objects...

2005-10-04 Thread Laurent RAHUEL
Le Mercredi 5 Octobre 2005 01:02, Robert Wittams a écrit : > This is another ridiculously overcomplicated system that has been > designed to try to take care of every problem, whilst proliferating > database entries like there is no tomorrow, and bewildering users and > administrators beyond belie

Re: "Ownership" role for objects...

2005-10-04 Thread Ian Maurer
On 10/4/05, Robert Wittams <[EMAIL PROTECTED]> wrote: > > This is another ridiculously overcomplicated system that has been > designed to try to take care of every problem, whilst proliferating > database entries like there is no tomorrow, and bewildering users and > administrators beyond belief.

Re: "Ownership" role for objects...

2005-10-04 Thread Robert Wittams
This is another ridiculously overcomplicated system that has been designed to try to take care of every problem, whilst proliferating database entries like there is no tomorrow, and bewildering users and administrators beyond belief. There is *no* authorisation system that is going to satisfy eve

Re: "Ownership" role for objects...

2005-10-04 Thread Robert Wittams
Sending again, since it seemed to get lost We had the same discussion before. The point is not anything as specific as ownership. It is authorisation in general. The only way to do this generically, without enforcing a horrendous zope-alike nightmare of per-object acls, is to allow the auth

Transaction Support

2005-10-04 Thread Joshua D. Drake
Hello, Thought I would throw a bone out there and ask what it would take to get transaction support finished up? Is there anything we can do to enhance the priority of the feature? Sincerely, Joshua D. Drake -- Your PostgreSQL solutions company - Command Prompt, Inc. 1.800.492.2240 Postgr

Re: "Ownership" role for objects...

2005-10-04 Thread Ian Maurer
One thing I had complete for a pet framework I was working on (that was until Django appeared and blew mine away ;) was a "policy" structure that allowed for ownership and other features that I liked. I was going to pull it out and re-use it in the project I am working on, but I figure it is wort

"Ownership" role for objects...

2005-10-04 Thread Jason Huggins
One big thing I'm missing in Django is the concept of object "ownership"... Here's my use case: Lets say I have 3 users: 1) Superuser - that's me... I can create or edit anything 2) Bob - He only has permission to create, edit, or delete expense reports that he owns. (He can "own" something he cre

Re: i18n -- DRAFT

2005-10-04 Thread Nebojša Đorđević - nesh
On 3-09-2005, at 12:11, hugo wrote: I did change the LANGUAGE_CODE stuff for the DjangoContext a bit, because LANGUAGE_CODE is only defined on the request if you have the i18n middleware loaded - now the DjangoContext either carries request.LANGUAGE_CODE or settings.LANGUAGE_CODE. Oooops, I