#23839: Regression in the admin's handling of querystring allowed fields
-------------------------------------------+---------------------------
               Reporter:  jphalip          |          Owner:  charettes
                   Type:  Bug              |         Status:  new
              Component:  contrib.admin    |        Version:  1.6
               Severity:  Release blocker  |       Keywords:
           Triage Stage:  Accepted         |      Has patch:  1
    Needs documentation:  0                |    Needs tests:  0
Patch needs improvement:  0                |  Easy pickings:  0
                  UI/UX:  0                |
-------------------------------------------+---------------------------
 Recent security patches have introduced a number of regressions. Most of
 those regressions have already been addressed in #23329 and #23604.
 However, there is still at least one remaining regression, where a model
 with a FK cannot be referenced by its primary key. This issue happens in
 particular when the said model is not registered as an inline, which
 occurs in a third-party like FeinCMS.

 FeinCMS implemented a work-around:
 
https://github.com/feincms/feincms/commit/30e93f33ffb17d9a3544c9bbc83c8bfa57b24a60

 Impending pull request loosens the check by always allowing the primary
 key to be referenced in the querystring.

--
Ticket URL: <https://code.djangoproject.com/ticket/23839>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/050.79d29a95086b67d8a0351acf5fcf5fc2%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to