Exclusive use of Groups about django-role-permissions HOT 3 CLOSED

...Actually the one use of default False available_permissions is that they will be removed when the old role is removed by assign_role_to_user which might not actually be expected.

from django-role-permissions.

The change from having UserRole to using Groups was due to feedbacks I got from other people.

For the sake of simplicity, I assumed Groups would only be used for managing roles, and that's why all user groups are deleted before a new one is assigned. Your approach is more correct, this library should not interfere with Groups beyond the ones it creates.

About available_permissions, they do limit permissions that can be applied. You are supposed to be using grant_permission and revoke_permission to manage then. This methods will check if they are valid for the user role. When you change users Role, the library assumes it is a fresh start on the new Role and that's why all permissions are deleted and rebuild according to the new role. Maybe all this should be better documented. I'll open an issue :)

Can you make a PR for your changes?

from django-role-permissions.

It's ready on pypi as version 0.6

from django-role-permissions.