Le 4 févr. 2013 à 14:35, Luke Plant <[email protected]> a écrit :
> I like Alex Ogier's solution of a sentinel "__all__" flag. This would be > introduced for ModelForm and UpdateView using a deprecation process, so > that a form without one of 'fields' or 'exclude' will raise a > PendingDeprecation warning initially, and eventually be illegal. > > Both the '__all__' shortcut and the use of 'exclude' will be plastered > with warnings in the docs, and the docs will be re-written to assume > that you are going to provide 'fields' (at the moment the opposite is > assumed). > > How does that sound? Hi Luke, This sounds like a good compromise between security and usability. I've created a ticket to avoid losing track of this topic again: https://code.djangoproject.com/ticket/19733 -- Aymeric. -- You received this message because you are subscribed to the Google Groups "Django developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/django-developers?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
