Autocomplete search button throws 403 on User proxy model

[kenricci]

I have a proxy model to the auth.User model using grappelli 3.0.8. I set up an autocomplete to the proxy model which works fine when typing a portion of the user name in the text box. However, when a user clicks on the magnifying glass lookup button, the system throws a 403 error.

If the user has superuser rights, it works. I tried added auth.user view permissions, but it won't work for a standard user.

[sehmaschine]

does it work without the autocomplete (e.g. with a raw id field)?

[kenricci]

No. Still throws a 403. I have turned off the lookup button with css for now as the autocomplete works

…

On Mon, Jan 22, 2024, 2:56 a.m. Patrick Kranzlmueller < ***@***.***> wrote: does it work without the autocomplete (e.g. with a raw id field)? — Reply to this email directly, view it on GitHub <#1045 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAU6TYWFZOOVLBDVYJXSD4DYPZAXFAVCNFSM6AAAAABCCJPA5SVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSMBTG42TIOBZGU> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[sehmaschine]

I'm not sure this is related to grappelli. The magnifying glass opens a new window based on django permissions – did you register that (proxy) model with the admin?

[kenricci]

Doh! I had view permission for the auth.User model, not the proxy. It now works exactly as it shows. Sorry for the trouble! Thank you for your prompt response. Regards, Ken

…

On Mon, Jan 22, 2024, 7:44 a.m. Patrick Kranzlmueller < ***@***.***> wrote: I'm not sure this is related to grappelli. The magnifying glass opens a new window based on django permissions – did you register that (proxy) model with the admin? — Reply to this email directly, view it on GitHub <#1045 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAU6TYQXQEND6PVOPDNMZPLYP2CNPAVCNFSM6AAAAABCCJPA5SVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSMBUGI3TQNRZGQ> . You are receiving this because you authored the thread.Message ID: ***@***.***>