<feed xmlns='http://www.w3.org/2005/Atom'>
<title>django.git/tests/admin_views/tests.py, branch main</title>
<subtitle>django
</subtitle>
<id>http://cgit.adnoto.dev/django.git/atom?h=main</id>
<link rel='self' href='http://cgit.adnoto.dev/django.git/atom?h=main'/>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/'/>
<updated>2026-04-28T17:44:04Z</updated>
<entry>
<title>Refs #15759 -- Fixed ModelAdmin.list_editable form submission for non-editable instances.</title>
<updated>2026-04-28T17:44:04Z</updated>
<author>
<name>Artyom Kotovskiy</name>
<email>artyomkotovskiy@gmail.com</email>
</author>
<published>2026-04-25T04:00:31Z</published>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/commit/?id=5b3cfce51770f46c6dc100e9be7f199a37176762'/>
<id>urn:sha1:5b3cfce51770f46c6dc100e9be7f199a37176762</id>
<content type='text'>
Added formset that excludes objects for which
user has no permission for POST formset as well.

Fixed regression test: the test was not simulating
real behaviour properly. By providing full form
data for the post request we skipped the part
where the user was actually limited in permissions
and only modified some of the rows.

Improved tests by getting rid of obj.id % 2
approach for granting permissions per object
for users, since it is not the safest.
Instead granting permissions simply by 'alive'
parameter, which is simpler and more stable.

Bug in 84db026228413dda4cd195464554d51c0b208e32.
</content>
</entry>
<entry>
<title>Fixed #10919 -- Added delete_confirmation_max_display to ModelAdmin.</title>
<updated>2026-04-23T02:22:55Z</updated>
<author>
<name>Rodrigo Vieira</name>
<email>rodrigo.vieira@gmail.com</email>
</author>
<published>2026-04-22T21:53:27Z</published>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/commit/?id=fa2a3de6ede10b005fc2c1d23f4cffb53eaec425'/>
<id>urn:sha1:fa2a3de6ede10b005fc2c1d23f4cffb53eaec425</id>
<content type='text'>
The new ModelAdmin.delete_confirmation_max_display attribute allows
limiting the number of related objects shown on the delete confirmation
page. When the limit is reached, a "…and N more objects." message is shown.

The feature relies on a new truncated_unordered_list template filter
added to django.contrib.admin.templatetags.admin_filters.

Thanks Jacob Tyler Walls for the review and guidance, Tobias McNulty for the report,
and terminator14 for the solution suggested.
</content>
</entry>
<entry>
<title>Fixed #35870 -- Made blank choice label in forms more accessible.</title>
<updated>2026-04-22T21:06:29Z</updated>
<author>
<name>Annabelle Wiegart</name>
<email>annabelle.wiegart@proton.me</email>
</author>
<published>2026-01-18T19:03:28Z</published>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/commit/?id=63c56cda133a85a158502891c40465bc0331d3d9'/>
<id>urn:sha1:63c56cda133a85a158502891c40465bc0331d3d9</id>
<content type='text'>
Added new constant django.db.models.fields.BLANK_CHOICE_LABEL for
an accessible and translatable blank choice label in forms.
Deprecated django.db.models.fields.BLANK_CHOICE_DASH constant.
Added the immediately deprecated transitional setting
USE_BLANK_CHOICE_DASH.

Co-Authored-By: Marijke Luttekes &lt;mail@marijkeluttekes.dev&gt;
</content>
</entry>
<entry>
<title>Fixed #15759 -- Excluded fields by per-object permissions for ModelAdmin.list_editable.</title>
<updated>2026-04-22T14:13:58Z</updated>
<author>
<name>Artyom Kotovskiy</name>
<email>artyomkotovskiy@gmail.com</email>
</author>
<published>2026-04-10T04:27:14Z</published>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/commit/?id=84db026228413dda4cd195464554d51c0b208e32'/>
<id>urn:sha1:84db026228413dda4cd195464554d51c0b208e32</id>
<content type='text'>
Instead of going over all objects in a queryset and filtering
by user permissions, added skipping while saving the formset
so there is no need to refetch objects again.
</content>
</entry>
<entry>
<title>Refs CVE-2026-4292 -- Isolated new test in AdminViewListEditable.</title>
<updated>2026-04-08T17:34:01Z</updated>
<author>
<name>Jacob Walls</name>
<email>jacobtylerwalls@gmail.com</email>
</author>
<published>2026-04-08T13:30:10Z</published>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/commit/?id=280256499c5b2d636949f3c8cb52159a8e4c26bb'/>
<id>urn:sha1:280256499c5b2d636949f3c8cb52159a8e4c26bb</id>
<content type='text'>
As originally written, this test interfered with
admin_views.tests.SeleniumTests.test_inline_uuid_pk_add_with_popup.
To fix this, register the new ModelAdmin with a different AdminSite.
</content>
</entry>
<entry>
<title>Fixed CVE-2026-4292 -- Disallowed instance creation via ModelAdmin.list_editable.</title>
<updated>2026-04-07T11:12:20Z</updated>
<author>
<name>Jacob Walls</name>
<email>jacobtylerwalls@gmail.com</email>
</author>
<published>2026-03-16T22:05:22Z</published>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/commit/?id=6afe7ce93964f56e33a29d477c269436f9b60cbf'/>
<id>urn:sha1:6afe7ce93964f56e33a29d477c269436f9b60cbf</id>
<content type='text'>
Thanks Natalia Bidart, Jake Howard, and Markus Holtermann for reviews.
</content>
</entry>
<entry>
<title>Fixed #36949 -- Improved RelatedFieldWidgetWrapper &lt;label&gt;s.</title>
<updated>2026-04-02T15:09:37Z</updated>
<author>
<name>David Smith</name>
<email>smithdc@gmail.com</email>
</author>
<published>2026-03-30T22:16:32Z</published>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/commit/?id=253f552c5809fa096116b601bd842ca4f3504860'/>
<id>urn:sha1:253f552c5809fa096116b601bd842ca4f3504860</id>
<content type='text'>
Regression in 4187da258fe212d494cb578a0bc2b52c4979ab95.
</content>
</entry>
<entry>
<title>Fixed #36976 -- Made admin action counter a live region for screen readers.</title>
<updated>2026-03-24T18:57:02Z</updated>
<author>
<name>davitacols</name>
<email>davitacols@gmail.com</email>
</author>
<published>2026-03-24T13:30:10Z</published>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/commit/?id=72e8fdd603d40c36bab240c3bcc8e43a3d79c6f2'/>
<id>urn:sha1:72e8fdd603d40c36bab240c3bcc8e43a3d79c6f2</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Fixed #34643 -- Moved inputs beneath labels and errors in admin forms.</title>
<updated>2026-02-27T12:43:45Z</updated>
<author>
<name>antoliny0919</name>
<email>antoliny0919@gmail.com</email>
</author>
<published>2025-08-07T13:17:50Z</published>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/commit/?id=187a789f99ecbc708de517c6b54d480b68ba59fe'/>
<id>urn:sha1:187a789f99ecbc708de517c6b54d480b68ba59fe</id>
<content type='text'>
Thanks Sarah Boyce and Jacob Walls for reviews.

Co-authored-by: Hrushikesh Vaidya &lt;hrushikeshrv@gmail.com&gt;
</content>
</entry>
<entry>
<title>Fixed a typo in tests/admin_views/tests.py.</title>
<updated>2026-02-23T18:14:03Z</updated>
<author>
<name>Zac Iloka</name>
<email>zachary.iloka@gmail.com</email>
</author>
<published>2026-02-23T01:44:28Z</published>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/commit/?id=9a8461f92250b49994aa133b564ec68617f6d78c'/>
<id>urn:sha1:9a8461f92250b49994aa133b564ec68617f6d78c</id>
<content type='text'>
</content>
</entry>
</feed>
