django.git/django/contrib/contenttypes/admin.py, branch main django http://cgit.adnoto.dev/django.git/atom?h=main 2026-04-07T11:12:16Z Fixed CVE-2026-4277 -- Checked add permissions in GenericInlineModelAdmin. 2026-04-07T11:12:16Z Jacob Walls jacobtylerwalls@gmail.com 2026-03-12T15:00:05Z urn:sha1:ef8b25dcc06d158683a5623ce406d561638f4073 Edit permissions were still checked as part of ordinary form validation, but because GenericInlineModelAdmin overrides get_formset(), it lacked InlineModelAdmin's dynamic DeleteProtectedModelForm.has_changed() logic for checking permissions server-side, leaving the add case unaddressed. This change reimplements the relevant part of InlineModelAdmin.get_formset(). Thanks N05ec@LZU-DSLab for the report, and Natalia Bidart, Markus Holtermann, and Simon Charette for reviews. Refs #36500 -- Rewrapped long docstrings and block comments via a script. 2025-07-23T23:17:55Z django-bot ops@djangoproject.com 2025-07-23T03:41:41Z urn:sha1:69a93a88edb56ba47f624dac7a21aacc47ea474f Rewrapped long docstrings and block comments to 79 characters + newline using script from https://github.com/medmunds/autofix-w505. Refs #33476 -- Refactored code to strictly match 88 characters line length. 2022-02-07T19:37:05Z Mariusz Felisiak felisiak.mariusz@gmail.com 2022-02-04T07:08:27Z urn:sha1:7119f40c9881666b6f9b5cf7df09ee1d21cc8344 Refs #33476 -- Reformatted code with Black. 2022-02-07T19:37:05Z django-bot ops@djangoproject.com 2022-02-03T19:24:19Z urn:sha1:9c19aff7c7561e3a82978a272ecdaad40dda5c00 Used model's Options.label where applicable. 2020-12-29T07:56:39Z Mariusz Felisiak felisiak.mariusz@gmail.com 2020-12-29T07:56:39Z urn:sha1:ce30e750e6259068ac348aa71f855a5f70d2d49f Follow up to b7a3a6c9ef0a89625881b47594120bca55fa2e49. Fixed #28909 -- Simplified code using tuple/list/set/dict unpacking. 2017-12-11T12:08:45Z Nick Pope nick.pope@flightdataservices.com 2017-12-11T12:08:45Z urn:sha1:d13a9e44ded4e93570c6ba42ec84e45ddca2505b Fixed #28860 -- Removed unnecessary len() calls. 2017-12-04T15:35:23Z Дилян Палаузов Dilyan.Palauzov@db.com 2017-11-29T16:54:34Z urn:sha1:d2afa5eb2308e672b6313876856e32e2561b90f3 Refs #23919 -- Removed encoding preambles and future imports 2017-01-18T08:55:19Z Claude Paroz claude@2xlibre.net 2016-11-19T17:19:41Z urn:sha1:d7b9aaa366dd54ecc3142c588162e3adc7c2f7ac Refs #16508 -- Renamed the current "virtual" fields to "private". 2016-04-13T14:10:53Z Michal Petrucha michal.petrucha@koniiiik.org 2016-03-20T17:10:55Z urn:sha1:c339a5a6f72690cd90d5a653dc108fbb60274a20 The only reason why GenericForeignKey and GenericRelation are stored separately inside _meta is that they need to be cloned for every model subclass, but that's not true for any other virtual field. Actually, it's only true for GenericRelation. Removed unneeded hint=None/obj=None in system check messages. 2016-02-12T18:01:25Z Tim Graham timograham@gmail.com 2016-02-12T16:36:46Z urn:sha1:004ba0f99eb25c3f32aa3a41707534e955d1878e