#28699: Document that REMOTE_USER must be logged in before making CSRF protected
requests.
-------------------------------+------------------------------------
     Reporter:  stephanm       |                    Owner:  Rodrigo
         Type:  Bug            |                   Status:  assigned
    Component:  Documentation  |                  Version:  1.11
     Severity:  Normal         |               Resolution:
     Keywords:  remote user    |             Triage Stage:  Accepted
    Has patch:  0              |      Needs documentation:  0
  Needs tests:  0              |  Patch needs improvement:  0
Easy pickings:  0              |                    UI/UX:  0
-------------------------------+------------------------------------

Comment (by Mariusz Felisiak <felisiak.mariusz@…>):

 In [changeset:"09013aae13b008359c054d5e4252844ebdb5aa57" 09013aa]:
 {{{
 #!CommitTicketReference repository=""
 revision="09013aae13b008359c054d5e4252844ebdb5aa57"
 [2.2.x] Refs #28699 -- Clarified CSRF middleware ordering in relation to
 RemoteUserMiddleware.

 Backport of 94469504706b494877b6bb45a979bcb81c7fd7be from master
 }}}

-- 
Ticket URL: <https://code.djangoproject.com/ticket/28699#comment:26>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/066.bc4a26867807f619731580a72dc05978%40djangoproject.com.

Reply via email to