Commit Graph

6 Commits

Author SHA1 Message Date
Carlton Gibson 092cd66cf3 Fixed CVE-2019-19118 -- Required edit permissions on parent model for editable inlines in admin.
Thank you to Shen Ying for reporting this issue.
2019-12-02 08:57:44 +01:00
Mariusz Felisiak f4ed6800bd [3.0.x] Fixed #30953 -- Made select_for_update() lock queryset's model when using "self" with multi-table inheritance.
Thanks Abhijeet Viswa for the report and initial patch.
Backport of 0107e3d105 from master
2019-12-02 07:58:04 +01:00
Mariusz Felisiak ca9144a4a8 [3.0.x] Fixed #31021 -- Fixed proxy model permissions data migration crash with a multiple databases setup.
Regression in 98296f86b3.

Backport of e8fcdaad5c from master
2019-11-29 11:10:36 +01:00
Baptiste Mispelon 3ed55606c4 [3.0.x] Fixed #31031 -- Fixed data loss in admin changelist view when formset's prefix contains regex special chars.
Regression in b18650a263.

Backport of 52936eface from master
2019-11-26 09:19:19 +01:00
Mariusz Felisiak 9ad38d4089 [3.0.x] Refs #29926 -- Doc'd Python 3.8 compatibility in Django 2.2.x.
Backport of b93a0e34d9 from master.
2019-11-12 22:13:54 +01:00
Mariusz Felisiak f375ad95fa [3.0.x] Added stub release notes for 2.2.8 release.
Backport of 30359496a3 from master
2019-11-12 14:42:15 +01:00