django.git/docs/topics/auth/default.txt, branch fix-31295

Fixed #37021 -- Added Permission.user_perm_str property.

2026-04-07T19:38:35Z

For use in checking user permissions via has_perm(). Co-authored-by: 사재혁

Fixed #27489 -- Renamed permissions upon model renaming in migrations.

2026-02-27T12:45:21Z

Co-authored-by: Jacob Walls

Fixed #36329 -- Removed non-code custom link text when cross-referencing Python objects.

2025-10-29T15:32:12Z

Thanks Bruno Alla, Sarah Boyce, and Jacob Walls for reviews. Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com>

Refs #36485 -- Rewrapped docs to 79 columns line length.

2025-08-25T13:51:10Z

Lines in the docs files were manually adjusted to conform to the 79 columns limit per line (plus newline), improving readability and consistency across the content.

Refs #36485 -- Removed double spaces after periods in sentences.

2025-08-25T13:51:10Z

Refs #36485 -- Removed unnecessary parentheses in :meth: and :func: roles in docs.

2025-08-25T13:51:10Z

Removed versionadded/changed annotations for 5.1.

2025-01-15T21:28:37Z

This also removes remaining versionadded/changed annotations for older versions.

Fixed CVE-2024-45231 -- Avoided server error on password reset when email sending fails.

2024-09-03T12:22:32Z

On successful submission of a password reset request, an email is sent to the accounts known to the system. If sending this email fails (due to email backend misconfiguration, service provider outage, network issues, etc.), an attacker might exploit this by detecting which password reset requests succeed and which ones generate a 500 error response. Thanks to Thibaut Spriet for the report, and to Mariusz Felisiak, Adam Johnson, and Sarah Boyce for the reviews.

Sorted alphabetically forms list in docs/topics/auth/default.txt.

2024-08-22T12:14:11Z

Fixed #35678 -- Removed "usable_password" field from BaseUserCreationForm.

2024-08-19T15:39:57Z

Refs #34429: Following the implementation allowing the setting of unusable passwords via the admin site, the `BaseUserCreationForm` and `UserCreationForm` were extended to include a new field for choosing whether password-based authentication for the new user should be enabled or disabled at creation time. Given that these forms are designed to be extended when implementing custom user models, this branch ensures that this new field is moved to a new, admin-dedicated, user creation form `AdminUserCreationForm`. Regression in e626716c28b6286f8cf0f8174077f3d2244f3eb3. Thanks Simon Willison for the report, Fabian Braun and Sarah Boyce for the review.