Skip to content

Commit 537e0cd

Browse files
akermenvdboor
authored andcommitted
node move permission fix
- 'app_label' added to match the permission codenames - instance parameter 'moved' removed from the permission check because default Django implementation of object level permisson backend returns 'False' even (non-admin) user has change permission for that object type
1 parent f2b11f5 commit 537e0cd

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

polymorphic_tree/admin/parentadmin.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -154,7 +154,7 @@ def api_node_moved_view(self, request):
154154
except self.model.DoesNotExist as e:
155155
return HttpResponseNotFound(json.dumps({'action': 'reload', 'error': str(e[0])}), content_type='application/json')
156156

157-
if not request.user.has_perm(get_permission_codename('change', moved._meta), moved):
157+
if not request.user.has_perm("%s.%s" % (moved._meta.app_label, get_permission_codename('change', moved._meta))):
158158
return HttpResponse(json.dumps({
159159
'action': 'reject',
160160
'moved_id': moved_id,

0 commit comments

Comments
 (0)