summaryrefslogtreecommitdiff
path: root/docs/ref/contrib/admin/index.txt
diff options
context:
space:
mode:
Diffstat (limited to 'docs/ref/contrib/admin/index.txt')
-rw-r--r--docs/ref/contrib/admin/index.txt3
1 files changed, 3 insertions, 0 deletions
diff --git a/docs/ref/contrib/admin/index.txt b/docs/ref/contrib/admin/index.txt
index 9b0a7cc8a4..51f694b072 100644
--- a/docs/ref/contrib/admin/index.txt
+++ b/docs/ref/contrib/admin/index.txt
@@ -1119,6 +1119,9 @@ subclass::
You must define :attr:`~ModelAdmin.search_fields` on the related object's
``ModelAdmin`` because the autocomplete search uses it.
+ To avoid unauthorized data disclosure, users must have the ``view`` or
+ ``change`` permission to the related object in order to use autocomplete.
+
Ordering and pagination of the results are controlled by the related
``ModelAdmin``'s :meth:`~ModelAdmin.get_ordering` and
:meth:`~ModelAdmin.get_paginator` methods.