nilva-django-admin 0.2.0__tar.gz

nilva_django_admin-0.2.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2023 Nilva
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

nilva_django_admin-0.2.0/PKG-INFO

@@ -0,0 +1,175 @@
+Metadata-Version: 2.4
+Name: nilva-django-admin
+Version: 0.2.0
+Summary: Nilva house Django-admin toolkit — BaseModelAdmin/BaseInlineAdmin composition, in-house Keycloak SSO admin login, captcha on login + selected models, dynamic model visibility, django-admin-interface theming
+Author-email: Nilva <dev@nilva.ai>
+License-Expression: MIT
+Project-URL: homepage, https://gitlab.nilva.ai/nilva/dev-assets/django/nilva-django-admin
+Project-URL: repository, https://gitlab.nilva.ai/nilva/dev-assets/django/nilva-django-admin
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Operating System :: OS Independent
+Classifier: Framework :: Django
+Classifier: Framework :: Django :: 6.0
+Requires-Python: >=3.14
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: django>=6.0
+Requires-Dist: django-autoutils>=2.1.1
+Requires-Dist: django-object-actions>=5.0.0
+Requires-Dist: requests>=2.32
+Requires-Dist: django-admin-interface>=0.30.1
+Provides-Extra: jalali
+Requires-Dist: django-jalali>=7.4.0; extra == "jalali"
+Dynamic: license-file
+
+# nilva-django-admin
+
+Nilva's house Django-admin toolkit: the `BaseModelAdmin` / `BaseInlineAdmin`
+composition every backend re-declares, an **in-house Keycloak SSO admin
+login** (no `django-admin-keycloak`), the **Cheshmeh-style captcha** on the
+login form and on selected models' change forms, **dynamic model
+visibility** driven by settings, the django-autoutils Django-6 compatibility
+patch, and [django-admin-interface](https://pypi.org/project/django-admin-interface/)
+theming as a dependency.
+
+## Install
+
+```bash
+uv add nilva-django-admin                  # everything below
+uv add "nilva-django-admin[jalali]"        # + Persian datepickers for jDateField models
+```
+
+## Wiring
+
+```python
+# settings.py
+INSTALLED_APPS = [
+    "admin_interface",          # theming (ships with this package)
+    "colorfield",
+    ...
+    "nilva_django_admin",                              # templates + app
+    "nilva_django_admin.admin_apps.NilvaAdminConfig",  # INSTEAD of django.contrib.admin
+    ...
+]
+
+NILVA_ADMIN = {
+    "APP_NAME": "shahab",
+    "SITE_TITLE": "Shahab administration",
+    "LOGIN_CAPTCHA": True,
+    "CAPTCHA_MODELS": ("user.User", "salary.*"),
+    "HIDDEN_MODELS": ("auth.Group",),
+    "KEYCLOAK": {
+        "SERVER_URL": "https://sso.nilva.ai",
+        "REALM_NAME": "nilva",
+        "CLIENT_ID": "...",
+        "CLIENT_SECRET": "...",
+    },
+    "CAPTCHA": {"BASE_URL": "https://host/services/captcha/v1.0"},
+}
+
+# urls.py
+path("api/sso/", include("nilva_django_admin.urls")),
+```
+
+## Base admin classes
+
+```python
+from nilva_django_admin.base import BaseInlineAdmin, BaseModelAdmin
+
+@admin.register(Delivery)
+class DeliveryAdmin(BaseModelAdmin):
+    list_display = ("id", "avatar_icon", "name", "editor_icon")
+```
+
+django-object-actions buttons, django-autoutils filters/avatars/edit-links/
+pretty-JSON, `editor_icon` auditing, the duck-typed house protocols
+(`get_obj()`, `get_prefetch_related_fields()`, `avatar_img_tag()`), Jalali
+datepickers when `django-jalali` is installed, and the Django-6
+`format_html` compat patch for django-autoutils 2.1.1. Defaults
+(`LIST_PER_PAGE`, `AVATAR_ICON_FIELD`) come from `NILVA_ADMIN`.
+
+## SSO admin login (in-house, no django-admin-keycloak)
+
+Plain OIDC authorization-code flow implemented in
+`nilva_django_admin.sso` / `.views`:
+
+* `GET <mount>/login/` redirects to the realm's `/auth` endpoint (CSRF
+  `state` kept in the session, `?next=` honoured when it is same-host).
+* `GET <mount>/callback/` exchanges the code, reads roles from the access
+  token (`realm_access` + `resource_access` + userinfo `groups`), maps
+  `{APP_NAME}_staff` → `is_staff` and `{APP_NAME}_super_user` →
+  `is_superuser` (overridable via `ROLE_STAFF_USER` / `ROLE_SUPER_USER`),
+  creates/updates the Django user and logs it in. Accounts without the
+  staff role are rejected. With `SYNC_GROUPS` (default) matching Django
+  `Group` rows are assigned.
+* `GET <mount>/logout/` logs out of Django and the Keycloak session.
+
+The admin login page (rendered by `NilvaAdminSite`) shows a **Login with
+SSO** button automatically whenever `KEYCLOAK` is configured and the URLs
+are mounted.
+
+## Captcha (Cheshmeh's service)
+
+`nilva_django_admin.captcha.CaptchaService` talks to the MCI/EBCOM-style
+captcha HTTP service (`GET ?width=…` → `{id, image}`; `GET
+/{id}/verify/{code}`). Typed codes are Persian/Arabic-digit normalized; the
+`VALIDATION_IGNORE` staging bypass only works when `DEBUG=True`.
+
+* **Login captcha** — `NILVA_ADMIN["LOGIN_CAPTCHA"] = True` puts the captcha
+  on the admin login form.
+* **Model captcha** — every model matching a `CAPTCHA_MODELS` pattern gets a
+  captcha on its admin add/change form. `BaseModelAdmin` injects the field
+  and appends a CAPTCHA fieldset when the admin declares explicit
+  `fieldsets`. A failed code re-renders with a fresh challenge; the
+  challenge id travels in a hidden field, so no session state is involved.
+
+## Dynamic model visibility
+
+Which models the admin shows follows settings, per request — no code
+changes or restarts of registration logic:
+
+```python
+NILVA_ADMIN = {
+    "VISIBLE_MODELS": ("worklog.*", "user.User"),  # None → all registered
+    "HIDDEN_MODELS": ("auth.Permission",),          # always wins
+}
+```
+
+`NilvaAdminSite.get_app_list` applies the `fnmatch` patterns, so the index
+and sidebar only show matching models. And for the inverse — surfacing
+models nobody wrote an admin for:
+
+```python
+# urls.py, after admin.autodiscover
+admin.site.auto_register()          # every unregistered model → BaseModelAdmin
+admin.site.auto_register(exclude=("django_celery_beat.*",))
+```
+
+## Theming
+
+`django-admin-interface` is a dependency: add `admin_interface` and
+`colorfield` to `INSTALLED_APPS` (before the admin), run `migrate`, and
+manage themes from the admin itself.
+
+## Settings reference — `NILVA_ADMIN`
+
+| key | default | notes |
+|-----|---------|-------|
+| `APP_NAME` | `None` | role-name defaults |
+| `LIST_PER_PAGE` / `AVATAR_ICON_FIELD` | `20` / `"avatar_32"` | `BaseModelAdmin` |
+| `SITE_TITLE` | `None` | site header/title |
+| `VISIBLE_MODELS` / `HIDDEN_MODELS` | `None` / `()` | fnmatch patterns |
+| `LOGIN_CAPTCHA` | `False` | captcha on the login form |
+| `CAPTCHA_MODELS` | `()` | captcha on these models' change forms |
+| `CAPTCHA.BASE_URL` … | — | captcha service (`WIDTH`/`HEIGHT`/`TYPE`/`PROXY`/`TIMEOUT`/`VALIDATION_IGNORE`) |
+| `KEYCLOAK.SERVER_URL` … | — | SSO (`REALM_NAME`/`CLIENT_ID`/`CLIENT_SECRET`/`SCOPE`/`REDIRECT_URI`/`ROLE_*`/`SYNC_GROUPS`/`VERIFY_SSL`/`TIMEOUT`) |
+| `SSO_BUTTON_TEXT` | `"Login with SSO"` | login page button |
+
+## Development
+
+```bash
+uv sync --group dev
+./run_tests.sh          # ./run_tests.sh -c for coverage
+uv run ruff check .
+```

nilva_django_admin-0.2.0/README.md

@@ -0,0 +1,150 @@
+# nilva-django-admin
+
+Nilva's house Django-admin toolkit: the `BaseModelAdmin` / `BaseInlineAdmin`
+composition every backend re-declares, an **in-house Keycloak SSO admin
+login** (no `django-admin-keycloak`), the **Cheshmeh-style captcha** on the
+login form and on selected models' change forms, **dynamic model
+visibility** driven by settings, the django-autoutils Django-6 compatibility
+patch, and [django-admin-interface](https://pypi.org/project/django-admin-interface/)
+theming as a dependency.
+
+## Install
+
+```bash
+uv add nilva-django-admin                  # everything below
+uv add "nilva-django-admin[jalali]"        # + Persian datepickers for jDateField models
+```
+
+## Wiring
+
+```python
+# settings.py
+INSTALLED_APPS = [
+    "admin_interface",          # theming (ships with this package)
+    "colorfield",
+    ...
+    "nilva_django_admin",                              # templates + app
+    "nilva_django_admin.admin_apps.NilvaAdminConfig",  # INSTEAD of django.contrib.admin
+    ...
+]
+
+NILVA_ADMIN = {
+    "APP_NAME": "shahab",
+    "SITE_TITLE": "Shahab administration",
+    "LOGIN_CAPTCHA": True,
+    "CAPTCHA_MODELS": ("user.User", "salary.*"),
+    "HIDDEN_MODELS": ("auth.Group",),
+    "KEYCLOAK": {
+        "SERVER_URL": "https://sso.nilva.ai",
+        "REALM_NAME": "nilva",
+        "CLIENT_ID": "...",
+        "CLIENT_SECRET": "...",
+    },
+    "CAPTCHA": {"BASE_URL": "https://host/services/captcha/v1.0"},
+}
+
+# urls.py
+path("api/sso/", include("nilva_django_admin.urls")),
+```
+
+## Base admin classes
+
+```python
+from nilva_django_admin.base import BaseInlineAdmin, BaseModelAdmin
+
+@admin.register(Delivery)
+class DeliveryAdmin(BaseModelAdmin):
+    list_display = ("id", "avatar_icon", "name", "editor_icon")
+```
+
+django-object-actions buttons, django-autoutils filters/avatars/edit-links/
+pretty-JSON, `editor_icon` auditing, the duck-typed house protocols
+(`get_obj()`, `get_prefetch_related_fields()`, `avatar_img_tag()`), Jalali
+datepickers when `django-jalali` is installed, and the Django-6
+`format_html` compat patch for django-autoutils 2.1.1. Defaults
+(`LIST_PER_PAGE`, `AVATAR_ICON_FIELD`) come from `NILVA_ADMIN`.
+
+## SSO admin login (in-house, no django-admin-keycloak)
+
+Plain OIDC authorization-code flow implemented in
+`nilva_django_admin.sso` / `.views`:
+
+* `GET <mount>/login/` redirects to the realm's `/auth` endpoint (CSRF
+  `state` kept in the session, `?next=` honoured when it is same-host).
+* `GET <mount>/callback/` exchanges the code, reads roles from the access
+  token (`realm_access` + `resource_access` + userinfo `groups`), maps
+  `{APP_NAME}_staff` → `is_staff` and `{APP_NAME}_super_user` →
+  `is_superuser` (overridable via `ROLE_STAFF_USER` / `ROLE_SUPER_USER`),
+  creates/updates the Django user and logs it in. Accounts without the
+  staff role are rejected. With `SYNC_GROUPS` (default) matching Django
+  `Group` rows are assigned.
+* `GET <mount>/logout/` logs out of Django and the Keycloak session.
+
+The admin login page (rendered by `NilvaAdminSite`) shows a **Login with
+SSO** button automatically whenever `KEYCLOAK` is configured and the URLs
+are mounted.
+
+## Captcha (Cheshmeh's service)
+
+`nilva_django_admin.captcha.CaptchaService` talks to the MCI/EBCOM-style
+captcha HTTP service (`GET ?width=…` → `{id, image}`; `GET
+/{id}/verify/{code}`). Typed codes are Persian/Arabic-digit normalized; the
+`VALIDATION_IGNORE` staging bypass only works when `DEBUG=True`.
+
+* **Login captcha** — `NILVA_ADMIN["LOGIN_CAPTCHA"] = True` puts the captcha
+  on the admin login form.
+* **Model captcha** — every model matching a `CAPTCHA_MODELS` pattern gets a
+  captcha on its admin add/change form. `BaseModelAdmin` injects the field
+  and appends a CAPTCHA fieldset when the admin declares explicit
+  `fieldsets`. A failed code re-renders with a fresh challenge; the
+  challenge id travels in a hidden field, so no session state is involved.
+
+## Dynamic model visibility
+
+Which models the admin shows follows settings, per request — no code
+changes or restarts of registration logic:
+
+```python
+NILVA_ADMIN = {
+    "VISIBLE_MODELS": ("worklog.*", "user.User"),  # None → all registered
+    "HIDDEN_MODELS": ("auth.Permission",),          # always wins
+}
+```
+
+`NilvaAdminSite.get_app_list` applies the `fnmatch` patterns, so the index
+and sidebar only show matching models. And for the inverse — surfacing
+models nobody wrote an admin for:
+
+```python
+# urls.py, after admin.autodiscover
+admin.site.auto_register()          # every unregistered model → BaseModelAdmin
+admin.site.auto_register(exclude=("django_celery_beat.*",))
+```
+
+## Theming
+
+`django-admin-interface` is a dependency: add `admin_interface` and
+`colorfield` to `INSTALLED_APPS` (before the admin), run `migrate`, and
+manage themes from the admin itself.
+
+## Settings reference — `NILVA_ADMIN`
+
+| key | default | notes |
+|-----|---------|-------|
+| `APP_NAME` | `None` | role-name defaults |
+| `LIST_PER_PAGE` / `AVATAR_ICON_FIELD` | `20` / `"avatar_32"` | `BaseModelAdmin` |
+| `SITE_TITLE` | `None` | site header/title |
+| `VISIBLE_MODELS` / `HIDDEN_MODELS` | `None` / `()` | fnmatch patterns |
+| `LOGIN_CAPTCHA` | `False` | captcha on the login form |
+| `CAPTCHA_MODELS` | `()` | captcha on these models' change forms |
+| `CAPTCHA.BASE_URL` … | — | captcha service (`WIDTH`/`HEIGHT`/`TYPE`/`PROXY`/`TIMEOUT`/`VALIDATION_IGNORE`) |
+| `KEYCLOAK.SERVER_URL` … | — | SSO (`REALM_NAME`/`CLIENT_ID`/`CLIENT_SECRET`/`SCOPE`/`REDIRECT_URI`/`ROLE_*`/`SYNC_GROUPS`/`VERIFY_SSL`/`TIMEOUT`) |
+| `SSO_BUTTON_TEXT` | `"Login with SSO"` | login page button |
+
+## Development
+
+```bash
+uv sync --group dev
+./run_tests.sh          # ./run_tests.sh -c for coverage
+uv run ruff check .
+```

nilva_django_admin-0.2.0/nilva_django_admin/__init__.py

@@ -0,0 +1,15 @@
+"""Nilva Django Admin — the Nilva house Django-admin toolkit.
+
+The ``BaseModelAdmin`` / ``BaseInlineAdmin`` composition every Nilva backend
+re-declares (django-object-actions + django-autoutils avatar/filter/JSON
+helpers + editor auditing + Jalali datepickers), the django-autoutils
+Django-6 compatibility patch, an in-house Keycloak SSO admin login (no
+django-admin-keycloak), the Cheshmeh-style captcha on the login form and on
+selected models' change forms, and ``NilvaAdminSite`` with settings-driven
+dynamic model visibility. Theming comes from ``django-admin-interface``.
+
+Import the pieces explicitly — ``base``/``sites``/``captcha``/``sso`` need
+Django; importing this package itself pulls nothing heavy.
+"""
+
+__version__ = "0.2.0"

nilva_django_admin-0.2.0/nilva_django_admin/admin_apps.py

@@ -0,0 +1,19 @@
+"""AdminConfig swap-in — lives in its own module so Django's default-AppConfig
+detection for ``nilva_django_admin`` stays unambiguous.
+"""
+
+from django.contrib.admin.apps import AdminConfig
+
+
+class NilvaAdminConfig(AdminConfig):
+    """Use in INSTALLED_APPS *instead of* ``django.contrib.admin`` so
+    ``admin.site`` becomes a :class:`nilva_django_admin.sites.NilvaAdminSite`::
+
+        INSTALLED_APPS = [
+            ...
+            "nilva_django_admin",
+            "nilva_django_admin.admin_apps.NilvaAdminConfig",  # not django.contrib.admin
+        ]
+    """
+
+    default_site = "nilva_django_admin.sites.NilvaAdminSite"

nilva_django_admin-0.2.0/nilva_django_admin/apps.py

@@ -0,0 +1,7 @@
+from django.apps import AppConfig
+
+
+class NilvaDjangoAdminConfig(AppConfig):
+    default_auto_field = "django.db.models.BigAutoField"
+    name = "nilva_django_admin"
+    verbose_name = "Nilva Admin"

nilva_django_admin-0.2.0/nilva_django_admin/base.py

@@ -0,0 +1,175 @@
+"""House ``BaseModelAdmin`` / ``BaseInlineAdmin`` — the Shahab composition,
+decoupled from project models via duck-typing.
+
+Every admin class inherits from these instead of ``admin.ModelAdmin`` /
+``admin.TabularInline`` directly. They compose django-object-actions,
+django-autoutils (advanced filters, avatars, edit links, limited FKs, pretty
+JSON, related inlines) and editor auditing, and honour the model protocols
+the fleet already uses:
+
+* ``get_obj()`` — permission-object indirection (``BASE_PERMISSION_OBJECT``)
+* ``get_prefetch_related_fields()`` — class-level ``PREFETCH_RELATED`` lists
+* ``avatar_img_tag(size=…)`` — avatar-model rendering
+* ``editor`` — audit field shown via :meth:`AbstractEditorAdmin.editor_icon`
+"""
+
+import logging
+from urllib import parse
+
+# Importing django_jalali.admin patches Django's admin FORMFIELD_FOR_DBFIELD_DEFAULTS
+# so jDateField/jDateTimeField render with the Persian datepicker widget. This
+# must happen before any ModelAdmin class is defined, so it lives here in the
+# base admin module that every app imports. Optional: skipped when
+# django-jalali isn't installed.
+try:
+    import django_jalali.admin  # noqa: F401
+except ImportError:
+    pass
+
+from django.contrib import admin
+from django.db.models import QuerySet
+from django.utils.translation import gettext_lazy as _
+from django_autoutils.admin_utils import (
+    AdvanceListFilter,
+    AvatarAdmin,
+    EditLinkAdmin,
+    InlineRelatedAdmin,
+    LimitForeignKeyAdmin,
+    PrettyJsonAdmin,
+    admin_display,
+)
+from django_autoutils.html_tag import get_edit_icon
+from django_object_actions import DjangoObjectActions
+
+from .captcha import captcha_protected, model_requires_captcha
+from .compat import patch_autoutils_html_tag
+from .settings import admin_settings
+
+patch_autoutils_html_tag()
+
+logger = logging.getLogger("nilva_django_admin")
+
+
+def _prefetch_for(model, queryset: QuerySet) -> QuerySet:
+    if hasattr(model, "get_prefetch_related_fields"):
+        return queryset.prefetch_related(*model.get_prefetch_related_fields())
+    return queryset
+
+
+class AbstractEditorAdmin:
+    """Mixin for models carrying an ``editor`` audit field."""
+
+    def _handle_instance(self, obj):
+        """For change extra field from inline object call this function."""
+
+    @admin_display(description=_("editor"))
+    def editor_icon(self, obj):
+        """Editor icon with editor name in admin panel object page."""
+        if not obj:
+            return None
+        if not hasattr(obj, "editor"):
+            return None
+        return get_edit_icon(obj.editor)
+
+
+class BaseModelAdmin(
+    DjangoObjectActions,
+    AdvanceListFilter,
+    AvatarAdmin,
+    AbstractEditorAdmin,
+    LimitForeignKeyAdmin,
+    PrettyJsonAdmin,
+    InlineRelatedAdmin,
+    admin.ModelAdmin,
+):
+    """Base admin for all models."""
+
+    search_fields = ("=id",)
+    show_full_result_count = False
+
+    def __init__(self, model, admin_site):
+        self.list_per_page = admin_settings.LIST_PER_PAGE
+        if not getattr(self, "avatar_icon_field", None):
+            self.avatar_icon_field = admin_settings.AVATAR_ICON_FIELD
+        super().__init__(model, admin_site)
+
+    def filter_queryset_by_url(self, request, queryset):
+        """Re-apply the changelist filters/search carried in
+        ``_changelist_filters`` (object-action round-trips)."""
+        changelist_filters = request.GET.get("_changelist_filters", "")
+        filters = dict(parse.parse_qsl(changelist_filters))
+        filter_fields_data = {}
+        for k, v in filters.items():
+            if k == "q" and v:
+                queryset = self.get_search_results(request, queryset, v)[0]
+            elif self.lookup_allowed(k, v, request):
+                filter_fields_data[k] = v
+        return queryset.filter(**filter_fields_data)
+
+    def _get_avatar_obj(self, obj):
+        return self.get_obj(obj)
+
+    @staticmethod
+    def get_obj(obj):
+        """Follow the ``get_obj()`` permission-object protocol when present."""
+        if hasattr(obj, "get_obj"):
+            return obj.get_obj()
+        return obj
+
+    @admin_display(description=_("icon"))
+    def avatar_icon(self, obj=None):
+        """Render the avatar via the model's ``avatar_img_tag`` when it has
+        one, else fall back to django-autoutils' implementation."""
+        target = self._get_avatar_obj(obj) if obj is not None else None
+        if hasattr(target, "avatar_img_tag"):
+            return target.avatar_img_tag(size=30)
+        return super().avatar_icon(obj=obj)
+
+    def get_queryset(self, request):
+        return _prefetch_for(self.model, super().get_queryset(request))
+
+    def get_form(self, request, obj=None, **kwargs):
+        if model_requires_captcha(self.model):
+            # inject BEFORE the factory runs so the declared captcha fields
+            # legitimise their names in the derived Meta.fields list
+            kwargs["form"] = captcha_protected(kwargs.get("form", self.form))
+        return super().get_form(request, obj, **kwargs)
+
+    def get_fieldsets(self, request, obj=None):
+        fieldsets = super().get_fieldsets(request, obj)
+        if model_requires_captcha(self.model):
+            from django.contrib.admin.utils import flatten_fieldsets
+
+            if "captcha_code" not in flatten_fieldsets(fieldsets):
+                fieldsets = [*fieldsets, (_("CAPTCHA"), {"fields": ("captcha_id", "captcha_code")})]
+        return fieldsets
+
+    @staticmethod
+    def get_back_url_for_changelist(request):
+        return "/".join(request.get_full_path().split("/")[:-3])
+
+    @staticmethod
+    def get_back_url(request):
+        full_path = request.get_full_path()
+        if "actions" not in full_path:
+            return full_path
+        return "/".join(full_path.split("/")[:-3])
+
+
+class BaseInlineAdmin(AvatarAdmin, EditLinkAdmin, LimitForeignKeyAdmin, AbstractEditorAdmin, admin.TabularInline):
+    """Base admin for all inlines."""
+
+    extra = 0
+
+    def __init__(self, parent_model, admin_site):
+        if not getattr(self, "avatar_icon_field", None):
+            self.avatar_icon_field = admin_settings.AVATAR_ICON_FIELD
+        super().__init__(parent_model, admin_site)
+
+    def get_queryset(self, request):
+        return _prefetch_for(self.model, super().get_queryset(request))
+
+    def _get_avatar_obj(self, obj):
+        if hasattr(obj, "get_obj"):
+            return obj.get_obj()
+        return obj