Display the homepage_layout as read-only is not own Dataspace

Signed-off-by: tdruez <[email protected]>

Author: tdruez

dje/admin.py

@@ -1147,6 +1147,16 @@ def get_fieldsets(self, request, obj=None):
             return self.add_fieldsets
         return super().get_fieldsets(request, obj)
 
+    def get_readonly_fields(self, request, obj=None):
+        """Only a user from the current Dataspace can edit Dataspace related FKs."""
+        readonly_fields = super().get_readonly_fields(request, obj)
+
+        dataspace = obj
+        if dataspace and dataspace != request.user.dataspace:
+            readonly_fields += ("homepage_layout",)
+
+        return readonly_fields
+
 
 @admin.register(Dataspace, site=dejacode_site)
 class DataspaceAdmin(
@@ -1519,6 +1529,15 @@ def formfield_for_foreignkey(self, db_field, request=None, **kwargs):
 
         return super().formfield_for_foreignkey(db_field, request, **kwargs)
 
+    def get_readonly_fields(self, request, obj=None):
+        """Only a user from the current Dataspace can edit Dataspace related FKs."""
+        readonly_fields = super().get_readonly_fields(request, obj)
+
+        if obj and obj.dataspace != request.user.dataspace:
+            readonly_fields += ("homepage_layout",)
+
+        return readonly_fields
+
     def user_change_password(self, request, id, form_url=""):
         """
         Remove the possibility to force a new password on a User.