Django role based form

Question

I have two users a customer and an admin. And I have an update and a create form with a status field and other fields. The status filed displays whether the order is received, scheduled, or in manufacturing. I want only the admin to update that field and customer to only view it. Can anyone tell me how can I implement it? Thanks!

Answer 1

Maybe you can try like this by overriding OrderForm:

class OrderForm(ModelForm):
    def __init__(self, *args, **kwargs):
        user = kwargs.pop('user', None)
        super(OrderForm, self).__init__(*args, **kwargs)
        if not user.is_superuser:  # or do admin check
            self.fields['status_choices'].widget.attrs['readonly'] = True

    class Meta:
        model = Order
        fields = '__all__'
        exclude = ['user','date']

Then pass the user instance through the OrderForm when initiating it in the view:

form = OrderForm(request.POST or None, request.FILES or None,initial=initial_date, user=user)

Update

It might not work for intitial data because it has a choice which does not exist in the choices in the model field of Order model. Change it to:

initial_date = {
    'status':"Processing/Manufacturing"
}

You can also add it as default value in the model field as well:

  status = models.CharField(max_length = 100, choices = status_choices, default="Processing/Manufacturing")

If you do not want to display to field at all, then you can make it hidden with:

if not user.is_superuser:  # or do admin check
    self.fields['status_choices'].widget.attrs['hidden'] = True

Or just remove it:

if not user.is_superuser:  # or do admin check
    self.fields.pop('status_choices')