From 03efa304bce5ef0924948a74ae01cdf817dd416a Mon Sep 17 00:00:00 2001
From: Tim Graham <timograham@gmail.com>
Date: Thu, 5 May 2016 12:42:19 -0400
Subject: Refs #25847 -- Added system check for
 UserModel.is_anonymous/is_authenticated methods.

---
 docs/ref/checks.txt | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'docs')

diff --git a/docs/ref/checks.txt b/docs/ref/checks.txt
index 486b88cc2e..e4af02c1a2 100644
--- a/docs/ref/checks.txt
+++ b/docs/ref/checks.txt
@@ -450,6 +450,12 @@ Auth
   to be at most 255 characters.
 * **auth.E008**: The permission named ``<name>`` of model ``<model>`` is longer
   than 255 characters.
+* **auth.C009**: ``<User model>.is_anonymous`` must be an attribute or property
+  rather than a method. Ignoring this is a security issue as anonymous users
+  will be treated as authenticated!
+* **auth.C010**: ``<User model>.is_authenticated`` must be an attribute or
+  property rather than a method. Ignoring this is a security issue as anonymous
+  users will be treated as authenticated!
 
 
 Content Types
-- 
cgit v1.3