tangentlabs/django-oscar — pull request #240 by fjern (2012-07-19 09:58:32+00:00)
Title: Permissions for generating reports in dashboard

Should oscar use so specific permissions as has_perm('order.can_view') instead of just is_staff? I think a project should create additional restrictions depending on their needs.

Report generators other than OrderReportGenerator use simply is_staff anyway.