summaryrefslogtreecommitdiff
path: root/docs/ref
diff options
context:
space:
mode:
authorJon Dufresne <jon.dufresne@gmail.com>2021-01-12 05:37:56 -0800
committerGitHub <noreply@github.com>2021-01-12 14:37:56 +0100
commitba31b0103442ac891fb3cb98f316781254e366c3 (patch)
treec41bf2e135811961ca80477521d6e6df5eb17624 /docs/ref
parent3071660acfbdf4b5c59457c8e9dc345d5e8894c5 (diff)
Fixed #31747 -- Fixed model enumeration via admin URLs.
Co-authored-by: Carlton Gibson <carlton.gibson@noumenal.es>
Diffstat (limited to 'docs/ref')
-rw-r--r--docs/ref/contrib/admin/index.txt13
1 files changed, 13 insertions, 0 deletions
diff --git a/docs/ref/contrib/admin/index.txt b/docs/ref/contrib/admin/index.txt
index 87d1b4f3f5..040b2ada85 100644
--- a/docs/ref/contrib/admin/index.txt
+++ b/docs/ref/contrib/admin/index.txt
@@ -2905,6 +2905,19 @@ Templates can override or extend base admin templates as described in
A boolean value that determines whether to show the navigation sidebar
on larger screens. By default, it is set to ``True``.
+.. attribute:: AdminSite.final_catch_all_view
+
+ .. versionadded:: 3.2
+
+ A boolean value that determines whether to add a final catch-all view to
+ the admin that redirects unauthenticated users to the login page. By
+ default, it is set to ``True``.
+
+ .. warning::
+
+ Setting this to ``False`` is not recommended as the view protects
+ against a potential model enumeration privacy issue.
+
.. attribute:: AdminSite.login_template
Path to a custom template that will be used by the admin site login view.