User can modify model when adding submit button

[Michaeljczhang]

User with only view permission can still edit and save the model.

All I need to do is to add a submit button to the existing submit row in html and click the button.

[ddein]

As an example of a quick solution you can override save_form:

    def save_form(self, request, form, change):
        obj = super().save_form(request, form, change)

        if not self._has_change_only_permission(request, obj):
            raise PermissionDenied

        return obj

[lefterisnik]

Hi @Michaeljczhang,

Yes, you are true. You can click the button but nothing will happen. Django Modelform will remove the readonly fields from the form so when Django will try to execute form.save() nothing will happen as there are no changes.

Thanks,
Lefteris