{"action":"created","issue":{"url":"https://api.github.com/repos/divio/django-cms/issues/1430","labels_url":"https://api.github.com/repos/divio/django-cms/issues/1430/labels{/name}","comments_url":"https://api.github.com/repos/divio/django-cms/issues/1430/comments","events_url":"https://api.github.com/repos/divio/django-cms/issues/1430/events","html_url":"https://github.com/divio/django-cms/issues/1430","id":6976212,"number":1430,"title":"Page permission inconsistencies","user":{"login":"kux","id":568447,"avatar_url":"https://avatars.githubusercontent.com/u/568447?v=3","gravatar_id":"","url":"https://api.github.com/users/kux","html_url":"https://github.com/kux","followers_url":"https://api.github.com/users/kux/followers","following_url":"https://api.github.com/users/kux/following{/other_user}","gists_url":"https://api.github.com/users/kux/gists{/gist_id}","starred_url":"https://api.github.com/users/kux/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kux/subscriptions","organizations_url":"https://api.github.com/users/kux/orgs","repos_url":"https://api.github.com/users/kux/repos","events_url":"https://api.github.com/users/kux/events{/privacy}","received_events_url":"https://api.github.com/users/kux/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/divio/django-cms/labels/needs%20patch","name":"needs patch","color":"f7c6c7"},{"url":"https://api.github.com/repos/divio/django-cms/labels/needs%20tests","name":"needs tests","color":"f7c6c7"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/divio/django-cms/milestones/24","html_url":"https://github.com/divio/django-cms/milestones/3.X","labels_url":"https://api.github.com/repos/divio/django-cms/milestones/24/labels","id":564301,"number":24,"title":"3.X","description":"","creator":{"login":"digi604","id":25490,"avatar_url":"https://avatars.githubusercontent.com/u/25490?v=3","gravatar_id":"","url":"https://api.github.com/users/digi604","html_url":"https://github.com/digi604","followers_url":"https://api.github.com/users/digi604/followers","following_url":"https://api.github.com/users/digi604/following{/other_user}","gists_url":"https://api.github.com/users/digi604/gists{/gist_id}","starred_url":"https://api.github.com/users/digi604/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/digi604/subscriptions","organizations_url":"https://api.github.com/users/digi604/orgs","repos_url":"https://api.github.com/users/digi604/repos","events_url":"https://api.github.com/users/digi604/events{/privacy}","received_events_url":"https://api.github.com/users/digi604/received_events","type":"User","site_admin":false},"open_issues":80,"closed_issues":18,"state":"open","created_at":"2014-02-10T10:30:40Z","updated_at":"2015-10-19T11:50:44Z","due_on":null,"closed_at":null},"comments":2,"created_at":"2012-09-19T08:45:14Z","updated_at":"2015-10-20T09:36:03Z","closed_at":null,"body":"When changing a user using 'Change User (page) ' form, you can set the user's 'Add', 'Change' , 'Delete' Page permissions.\nIn the meanwhile, the 'Page permissions' formset on any page has the following checkboxes: 'Can edit', 'Can add', 'Can delete' which overlap with the functionality of the three permissions above.\n\nThe problem with this is that you can make strange combinations:\n* disable 'Add' on the 'Change User (page); form, but enable 'Can add' on a page's 'Page permissions' formset\n   => the user will continue having the 'Add child' button active on the 'actions' column in the page hierarchy webpage, even though 'Add' is disabled for that user. I would have expected that the user has a certain permission if the permission is ticked in both 'User (page)' form and 'Page permissions' formset\n\n* disable 'Delete' on the 'Change User (page); form, but enable 'Can delete' on a page's 'Page permissions' formset\n   => the user will NO LONGER have the 'Delete' button active on the 'actions' column in the page hierarchy. This behavior is as I would have expected, but it's inconsistent with the behavior above.\n\nI think the best solution would be:\n* If the user doesn't have a page permission set in the 'Change user (page)' form, then simply disable the corresponding tickbox in a page's 'Page permissions' formset\n"},"comment":{"url":"https://api.github.com/repos/divio/django-cms/issues/comments/149495087","html_url":"https://github.com/divio/django-cms/issues/1430#issuecomment-149495087","issue_url":"https://api.github.com/repos/divio/django-cms/issues/1430","id":149495087,"user":{"login":"FinalAngel","id":270307,"avatar_url":"https://avatars.githubusercontent.com/u/270307?v=3","gravatar_id":"","url":"https://api.github.com/users/FinalAngel","html_url":"https://github.com/FinalAngel","followers_url":"https://api.github.com/users/FinalAngel/followers","following_url":"https://api.github.com/users/FinalAngel/following{/other_user}","gists_url":"https://api.github.com/users/FinalAngel/gists{/gist_id}","starred_url":"https://api.github.com/users/FinalAngel/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/FinalAngel/subscriptions","organizations_url":"https://api.github.com/users/FinalAngel/orgs","repos_url":"https://api.github.com/users/FinalAngel/repos","events_url":"https://api.github.com/users/FinalAngel/events{/privacy}","received_events_url":"https://api.github.com/users/FinalAngel/received_events","type":"User","site_admin":false},"created_at":"2015-10-20T09:36:03Z","updated_at":"2015-10-20T09:36:03Z","body":"Closed in favour of #4598 "}}