[admin] Only organizationuser objects which have admin=True should be able to manage their organization in the admin
See original GitHub issueIt could happen that a user which has is_staff
set to True
becomes member of another organization because he wants to use some service (implemented in other openwisp modules) of that organization as a user, but at the moment we can’t let that happen because in the moment he become member of that organization he will also be able to edit the objects of that organization from the admin.
To solve this problem, we should change the code so that only OrganizationUser
objects which are both member of an organization and have is_admin
set to True
are able to see and edit the objects of that organization.
When OrganizationUser.is_admin
is set to False
the user won’t be allowed to see anything related to that organization in the admin.
Issue Analytics
- State:
- Created 5 years ago
- Comments:7 (7 by maintainers)
Top Results From Across the Web
Create an admin role for an organizational unit - Google Help
As your organization's administrator, you can assign a user to a custom administrator role so they can perform management tasks for an organizational...
Read more >About admin roles in the Microsoft 365 admin center
Select the Assigned or Assigned admins tab to add users to roles. You'll probably only need to assign the following roles in your...
Read more >Knife user creation doesn't work in Chef 12 · Issue #3010
The short answer: You probably want to either (1) use chef-server-ctl user-create or (2) temporarily configure your knife client to such ...
Read more >How do I build a collection of Users for an Organization using ...
Upon first creating an account the User becomes Admin of the Organization and is able to add other Users that belong_to the same...
Read more >Admin Users API - Terraform Enterprise - HashiCorp Developer
The Users Admin API contains endpoints to help site administrators manage ... Can be "true" or "false" to show only suspended users or...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
@OltarzewskiK up to you, there are no requirements in open source, contributors contribute when they can. If someone else comes up and can finish this issue before you do we shouldn’t prevent them from doing so, because it’s more important to fix the issue than who fixes it, I’ll send you some suggestions via PM
@nemesisdesign Are you sure that I have to change this method: https://github.com/openwisp/openwisp-users/blob/master/openwisp_users/admin.py#L195-L213 the class where it is referring to is I think for
User
notOrganizationUser
, so have I to create new class in theadmin
?