django.git/tests/admin_views, branch main

Refs #15759 -- Fixed ModelAdmin.list_editable form submission for non-editable instances.

2026-04-28T17:44:04Z

Added formset that excludes objects for which user has no permission for POST formset as well. Fixed regression test: the test was not simulating real behaviour properly. By providing full form data for the post request we skipped the part where the user was actually limited in permissions and only modified some of the rows. Improved tests by getting rid of obj.id % 2 approach for granting permissions per object for users, since it is not the safest. Instead granting permissions simply by 'alive' parameter, which is simpler and more stable. Bug in 84db026228413dda4cd195464554d51c0b208e32.

Refs #35943 -- Fixed admin_views.test_related_object_lookups crash when selenium is not installed.

2026-04-23T06:52:41Z

Fixed #10919 -- Added delete_confirmation_max_display to ModelAdmin.

2026-04-23T02:22:55Z

The new ModelAdmin.delete_confirmation_max_display attribute allows limiting the number of related objects shown on the delete confirmation page. When the limit is reached, a "…and N more objects." message is shown. The feature relies on a new truncated_unordered_list template filter added to django.contrib.admin.templatetags.admin_filters. Thanks Jacob Tyler Walls for the review and guidance, Tobias McNulty for the report, and terminator14 for the solution suggested.

Refs #10919 -- Refactored walk_items as module-level _walk_items and added truncated_unordered_list filter.

2026-04-23T02:22:55Z

Fixed #35870 -- Made blank choice label in forms more accessible.

2026-04-22T21:06:29Z

Added new constant django.db.models.fields.BLANK_CHOICE_LABEL for an accessible and translatable blank choice label in forms. Deprecated django.db.models.fields.BLANK_CHOICE_DASH constant. Added the immediately deprecated transitional setting USE_BLANK_CHOICE_DASH. Co-Authored-By: Marijke Luttekes

Fixed #35943 -- Replaced unload event listener with pagehide.

2026-04-22T14:14:40Z

Co-authored-by: Peter van der Does Co-authored-by: Jacob Walls

Fixed #15759 -- Excluded fields by per-object permissions for ModelAdmin.list_editable.

2026-04-22T14:13:58Z

Instead of going over all objects in a queryset and filtering by user permissions, added skipping while saving the formset so there is no need to refetch objects again.

Refs CVE-2026-4292 -- Isolated new test in AdminViewListEditable.

2026-04-08T17:34:01Z

As originally written, this test interfered with admin_views.tests.SeleniumTests.test_inline_uuid_pk_add_with_popup. To fix this, register the new ModelAdmin with a different AdminSite.

Fixed CVE-2026-4292 -- Disallowed instance creation via ModelAdmin.list_editable.

2026-04-07T11:12:20Z

Thanks Natalia Bidart, Jake Howard, and Markus Holtermann for reviews.

Fixed #36949 -- Improved RelatedFieldWidgetWrapper s.

2026-04-02T15:09:37Z

Regression in 4187da258fe212d494cb578a0bc2b52c4979ab95.