get_users_with_perms - with_group_users = False and attach_perms = True returns group permissions. about django-guardian HOT 3 CLOSED

Hey, sorry but this is invalid example.

Calling get_users_with_perms with with_group_users set to False should return all users that have at least one permission for given object. Your case says that user has 'read' permission to an object. If that user would have only permissions to an object coming from groups he/she is connected to, then that user would NOT be returned by the function. Note that attach_perms means that for returned user, we try to attach all permissions he/she has for specified object. If you don't want those permissions, you should use standard orm filtering (on your own, as this is not covered by guardian and I don't see use case where it would be useful...).

On the other hand, I have to admit that we may not have greatest flag naming here. Still, test case is invalid. If you'd want some behavior to be changed, please file another ticket!

Thanks!

from django-guardian.

I think this might be fixed with #403. (But I have not read the issue precisely.)

from django-guardian.

It is fixed in version 1.4.2.

from django-guardian.