Proposal: security enhancements

2018-05-01 Thread James Bennett
I've written this up in pseudo-DEP format partly for ease of organization, and partly because I'm unsure whether it would require a DEP. Right now I'm just throwing it out here as a proposal, and offering to work on implementing it; if you have questions, concerns, or suggestions for things to add

Re: Proposal: security enhancements

2018-05-01 Thread Jacob Kaplan-Moss
Great ideas, James. I totally agree we shouldn't rest on our laurels, and love the goal of pushing things forwards. Overall, I'm not sure a DEP is needed: each of these things is fairly small and tightly scoped, can be implemented on its own, and provides value independent of the whole. That seems

Re: Fellow Reports -- April 2018

2018-05-01 Thread Carlton Gibson
Hi all, Calendar Week 17 -- ending 27th April. Reviewed Patches on: https://code.djangoproject.com/ticket/8936 -- Add view (read-only) permission to admin https://code.djangoproject.com/ticket/29353 -- _middleware_chain is not set for StaticFilesHandler https://code.djangoproject.com/ticket/

Django bugfix releases: 2.0.5 and 1.11.13

2018-05-01 Thread Tim Graham
Details are available on the Django project weblog: https://www.djangoproject.com/weblog/2018/may/01/bugfix-releases/ -- You received this message because you are subscribed to the Google Groups "Django developers (Contributions to Django itself)" group. To unsubscribe from this group and stop

Re: Fellow Reports - April 2018

2018-05-01 Thread Tim Graham
Week ending April 28, 2018 Triaged --- https://code.djangoproject.com/ticket/29354 - ordering inherited from abstract superclass does not get applied to admin inlines (invalid) https://code.djangoproject.com/ticket/29366 - startproject --template option doesn't support http authenticati

Re: Thoughts on diff-based migrations with django?

2018-05-01 Thread djrobstep
Bump! Is there a documented way to generate the from-scratch creation SQL for the currently defined models? If not, is it possible to add something that spits this out? Happy to take a look at implementing this. On Sunday, 25 February 2018 13:48:27 UTC+11, djrobstep wrote: > > Yes, I don't thin