summaryrefslogtreecommitdiff
path: root/django
AgeCommit message (Collapse)Author
2011-02-25Fixed #15490 -- Added some missing semicolons in admin javascript. Thanks to ↵Russell Keith-Magee
Jonathan Slenders for the report and patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15641 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-24Prevented non-admin users from accessing the admin redirect shortcut.Jacob Kaplan-Moss
If the admin shortcut view (e.g. /admin/r/<content-type>/<pk>/) is publically-accessible, and if a public users can guess a content-type ID (which isn't hard given that they're sequential), then the redirect view could possibly leak data by redirecting to pages a user shouldn't "know about." So the redirect view needs the same protection as the rest of the admin site. Thanks to Jason Royes for pointing this out. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15639 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-24Fixed #14012 (again) -- Admin app: Don't show the full user edition view ↵Ramiro Morales
after adding a user in a FK popup. Thanks dburke for reporting this regression introduced in r14628. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15637 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-23Fixed #12004 -- Improved error reporting when an abstract class is ↵Russell Keith-Magee
registered with the admin. Thanks to Matt Smalley for the report, and to mk and Julien Phalip for the patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15636 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-23Fixed #15299 -- Started the process of migrating the auth context processor ↵Russell Keith-Magee
support classes into the auth context processor module. Thanks to shailesh for the report, and v1v3kn for the draft patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15635 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-22Fixed #15371 -- Ensure that a superuser created with the createsuperuser ↵Russell Keith-Magee
management command with --noinput has an invalid password, not a blank password. Thanks to yishaibeeri for the report and patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15631 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-22Fixed #13510 -- Corrected colspan of non-field-specific error messages in ↵Ramiro Morales
admin app tabular inlines so it isn't greater than the actual number of field cells. Thanks KyleMac for the report and Julien Phalip for the patch fixing the issue. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15626 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-21Corrected logging call in CSRF middlewareLuke Plant
git-svn-id: http://code.djangoproject.com/svn/django/trunk@15623 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-21Fixed #11058 - list_display_links doesn't allow callables not defined in the ↵Luke Plant
model Thanks to dvine for the report and julien for the patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15619 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-21Fixed HTML error in admin when using list_editable.Luke Plant
git-svn-id: http://code.djangoproject.com/svn/django/trunk@15616 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-21Fixed #15349 - Bound FormSet produces bound empty_formLuke Plant
Thanks to hidde-jan for the report and patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15614 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-21Fixed #14099 - BaseModelFormSet should use _should_delete_formLuke Plant
Thanks to kenth for the report and patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15612 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-21Fixed #15369 -- Added missing import in _os module. Thanks, jonash.Jannis Leidel
git-svn-id: http://code.djangoproject.com/svn/django/trunk@15611 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-21Fixed #11707 - limit_choices_to on a ForeignKey can render duplicate options ↵Luke Plant
in formfield Thanks to Chris Wesseling for the report and patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15607 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-21Fixed #11852 -- Ensure that a long string in the password reset email can be ↵Russell Keith-Magee
translated. Thanks to pihentagy for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15606 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-21Fixed #15359 -- Ensure that the -h option is always honored by ↵Russell Keith-Magee
django-admin.py. Thanks to teubank for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15605 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-21Fix broken tests due to changes in r15591 by updating the test ↵Chris Beaven
store_rendered_templates signal handler. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15600 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-20Fixed #15358 -- Renamed a test to avoid a naming collision. Thanks to mila ↵Russell Keith-Magee
for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15598 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-20Fixed #14529 -- Fixed representation of model names in admin messages after ↵Ramiro Morales
model object changes when the ModelAdmin queryset() uses defer() or only(). Thanks rlaager for report and initial patch, to rasca an julien for help in tracking the problem. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15596 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-20Tweaked the changes from changeset r15580 so as to avoid introducing a ↵Russell Keith-Magee
backwards incompatible context change to the change_list_results template. Refs #13126. Thanks to Sean Brant for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15593 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-20Ensure render_to_string leaves the context instance stack in the state it ↵Chris Beaven
was originally passed in. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15591 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-19Fixed #9161 -- Ensure that ModelMultipleChoiceField respects to_field_name ↵Russell Keith-Magee
in validation. Thanks to Honza for the report, and Gregor Müllegger for the patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15587 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-19Fixed #11513 -- Ensure that the redirect at the end of an object change ↵Russell Keith-Magee
won't redirect to a page for which the user doesn't have permission. Thanks to rlaager for the report and draft patch, and to Julien Phalip for the final patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15584 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-19Fixed #14355 -- Ensure that help_text is displayed for readonly fields in ↵Russell Keith-Magee
the admin. Thanks to jester for the report, and to alexbmeng, subsume, wamberg and Julien Phalip for ther work on the patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15582 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-19Fixed #13126 -- Ensured that individual form errors are displayed when ↵Russell Keith-Magee
errors occur on a list-editable changelist. Thanks to slafs for the report, and to Julien Phalip for the patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15580 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-19Fixed #15291 -- Corrected alignment issue when actions are disabled in a ↵Russell Keith-Magee
ModelAdmin. Thanks to Julien Phalip for the report and patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15573 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-19Fixed #15290 -- Fixed a CSS styling issue with borders when the link item in ↵Russell Keith-Magee
a changelist isn't the first item in the list_display. Thanks to Julien Phalip for the report and patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15572 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-19Fixed #15336 -- Silenced a warning about the DATABASES transition when a ↵Russell Keith-Magee
database backend isn't specified. Thanks to Ivan Sagalaev for the report and patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15571 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-19Fixed #15292 -- Removed redundant code in admin list template tag. Thanks to ↵Russell Keith-Magee
Julien Phalip for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15570 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-19Fixed #15322 -- Removed a redundant check in admin logins. Thanks to ↵Russell Keith-Magee
melinath for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15569 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-19Fixed #15327 -- Modified the Oracle test database signature method to allow ↵Russell Keith-Magee
for the case where TEST_USER is unspecified. Thanks to depaolim for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15568 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-19Fixed #15324 -- Modified the connection creation code for the memcache cache ↵Russell Keith-Magee
backend. Thanks to dlowe for the report and initial patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15567 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-17Fixed #15260 -- Ensured that CACHE_MIDDLEWARE_ANONYMOUS_ONLY is effective ↵Carl Meyer
with the cache_page decorator, not only the middleware. Thanks to brodie for report and draft patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15559 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-16Fixed #15314 -- Added tests for the static URL pattern function added in ↵Jannis Leidel
r15530 and made sure the **kwargs are passed to the view correctly. Thanks for the report and initial patch, Bruno Renié. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15552 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-15Fixed #15247 -- Ensured that if a SingleObject view defines get_object but ↵Russell Keith-Magee
not get_queryset, the ModelFormMixin doesn't fail. Thanks to Sergey N. Belinsky for the report and test case. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15540 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-14Modified the staticfiles serve view to return a 404 early in the stack.Jannis Leidel
git-svn-id: http://code.djangoproject.com/svn/django/trunk@15539 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-14Fixed the staticfiles management commands collectstatic and findstatic to ↵Jannis Leidel
not raise encoding related exceptions when handlings filenames with non-ASCII characters. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15538 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-14Fixed #15287 -- Added translation markers to user-facing error messages in ↵Russell Keith-Magee
class-based generic views. Thanks to szczav for the report and draft patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15533 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-14Fixed #15298 -- Raise a better error when a TemplateResponseMixin doesn't ↵Russell Keith-Magee
have a template_name defined. Thanks to rasca for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15532 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-14Fixed #15272 -- Altered generic views to use the guaranteed untranslated ↵Russell Keith-Magee
object_name, rather than the possibly translated verbose_name(_plural) for default context objects. Thanks to szczav for the report and patch. This is BACKWARDS INCOMPATIBLE for anyone relying on the default context object names for class-based Detail and List views. To migrate, either update your templates to use the new default names, or add a context_object_name argument to your generic views. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15531 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-14Fixes #15270 -- Moved back the serve view to django.views.static due to ↵Jannis Leidel
dependency conflicts with the contrib app staticfiles (reverts parts of r14293). Added a helper function that generates URL patterns for serving static and media files during development. Thanks to Carl for reviewing the patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15530 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-14Normalize the locale paths when considering merging a project language ↵Jannis Leidel
catalogue. Refs #14924. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15529 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-14Fixed #15293 -- Updated the dummy backend to support the APIs introduced by ↵Russell Keith-Magee
r15493. Thanks to mp for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15528 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-14Fixed #15297 -- Corrected an attribute naming regressoin from fixing #9964. ↵Russell Keith-Magee
Thanks to leonov for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15527 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-13Fixed #13902 -- Fixed admin list_filter so it doesn't show duplicate results ↵Ramiro Morales
when it includes a field spec that involves m2m relationships with an intermediate model. Thanks Iván Raskovsky for the report and patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15526 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-13Fixed #13007 -- Made cookie parsing resilent to the presence of cookies with ↵Ramiro Morales
invalid characters in their names. Thanks Warlax for the report, Ubercore for his work on a fix and Jannis and Luke for review and guidance. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15523 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-13Fixed #14130 -- Made manage.py error reporting more useful when the ↵Ramiro Morales
settings.py file triggers import errors (in new projects). Thanks Setok for the report, mk and steph for their work. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15522 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-12Removed more redundant code from the debug cursor wrapper. Thanks to Ramiro ↵Russell Keith-Magee
for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15519 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-12Fixed #15289 -- Removed a redundant __getattr__ implementation from the ↵Russell Keith-Magee
debug SQL cursor wrapper. Thanks to Apollo13 for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15516 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-12Don't merge in translations twice from deprecated project level tree when it ↵Ramiro Morales
is also listed in LOCALE_PATHS. Thanks Claude Paroz. Refs #14924. Also, removed some old unused variables as reported by pyflakes. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15514 bcc190cf-cafb-0310-a4f2-bffc1f526a37