View and edit permissions for dashboards about django-sql-dashboard HOT 9 CLOSED

I'm going to optionally use Django auth groups for this, if they are defined.

I think a select box for "who can view" and a select box for "who can edit" will work. Following options:

• Anyone (available for view but not for edit)
• Only me (effectively private dashboards)
• Logged in users
• Staff users
• Super users
• Users in group X (one option for each group)

from django-sql-dashboard.

I'm going to add six columns to Dashboard for this:

• created_by - foreign key to User
• created_at - datetime
• view_policy - enum
• edit_policy - enum
• view_group - nullable foreign key to Group
• edit_group - nullable foreign key to Group

from django-sql-dashboard.

The policy enums will cover:

• public (not for view, just edit)
• creator
• loggedin_users
• group
• staff
• superusers

from django-sql-dashboard.

Another view permission option: unlisted - available to the public but only if they know the dashboard URL.

These ones won't be shown on the /dashboard/ index page and will have robots SEO exclusion.

from django-sql-dashboard.

Model changes in the admin (I customized the admin fieldsets):

from django-sql-dashboard.

from django-sql-dashboard.

I'm going to change created_by to owned_by since that makes it clear that it's OK for a user to "transfer ownership" of a dashboard to someone else.

from django-sql-dashboard.

Next steps: get the dashboards to obey these permissions, with comprehensive tests. Editing can still happen through the admin interface for the moment.

Dashboards should include a visible note that explains who is allowed to edit or view the dashboard.

from django-sql-dashboard.

The remaining edit work will take place in #44.

from django-sql-dashboard.