Re: How many Django web pages does it take . . .

2012-01-08 Thread Gabriel Hurley
FWIF, the code that generates that message is here: https://code.djangoproject.com/browser/django/trunk/docs/_ext/djangodocs.py#L84 Feel free to open a ticket if you like. All the best, - Gabriel -- You received this message because you are subscribed to the Google Groups "Django develop

Re: Proposal: Logout user when they change their password.

2012-01-08 Thread Gabriel Hurley
Options 2 and 4 from that list both involve database-level changes, and thus aren't feasible (our lack of schema migration tools being the biggest problem). Of those, I'd go for option 3 as well. We definitely don't want to store the full hash in the session for obvious security reasons, but a

Re: Proposal: Logout user when they change their password.

2012-01-08 Thread Jeremy Dunck
On Sun, Jan 8, 2012 at 2:57 PM, Arnoud van Heuvelen wrote: ... > 3) Save the password hash (or part of it) in the session and compare > it against our data. If the hash is not the same, the user needs to be > logged out. This wouldn't change the database, but the downside is > that this causes ove

Re: How many Django web pages does it take . . .

2012-01-08 Thread Lachlan Musicman
On Sat, Jan 7, 2012 at 16:10, Alec Taylor wrote: > What you are talking about is a form. > > Form: https://docs.djangoproject.com/en/dev/topics/forms/ > Autocomplete: https://code.djangoproject.com/wiki/AutoCompleteSolutions > Unique fields: https://docs.djangoproject.com/en/1.3/ref/forms/validati

Re: Proposal: Logout user when they change their password.

2012-01-08 Thread Arnoud van Heuvelen
Well, as far as I see it, we have a number of options. These are some I could come up with, but maybe someone else has a better idea: 1) Save the user_id with the session. This is probably not convenient, because it might conflict with other applications that use the session package. Of course we

Re: Django-nonrel patches

2012-01-08 Thread Jonas H.
On Sun 08 Jan 2012 05:39:02 PM CET, Emil Stenström wrote: On Thursday, December 8, 2011 10:31:39 PM UTC+1, jo...@lophus.org wrote: 1.) I didn't write the code, I'm just submitting the patches in their current state Jonas: Do you have information on who wrote the code that you submitted? I g

Re: Django-nonrel patches

2012-01-08 Thread Emil Stenström
On Thursday, December 8, 2011 10:31:39 PM UTC+1, jo...@lophus.org wrote: > > 1.) I didn't write the code, I'm just submitting the patches in their > current state > Jonas: Do you have information on who wrote the code that you submitted? I guess a good way forward would be to find those people,