Re: django.contrib.auth CLI

2018-10-10 Thread Adam Johnson
This sounds like it could be useful but not sure how many projects manage their Django users through config management commands like this. Whilst you say it would be useful in core, if you had a concrete implementation in a third party app that would provide more to talk about, and allow you to so

Re: Requiring sqlparse for sqlite introspection

2018-10-10 Thread Tim Graham
sqlparse is already installed as part of Django's tests. The question is whether sqlparse should be mandatory for SQLite users (i.e. when getting started with a new project an error message will say, "You must install sqlparse to use SQLite" (I don't think there's a way to install it automatica

Re: Standalone is_safe_url() function

2018-10-10 Thread ivan via Django developers (Contributions to Django itself)
Hi Markus, Well, adding new requirements for every function might be not a scalable approach, but if some stuff in django important for security was separated into a sub-project it could allow more people to patch their projects more easily. From what I've seen in various projects I worked in,

Fellow Reports - October 2018

2018-10-10 Thread Tim Graham
Week ending October 6, 2018 Triaged --- https://code.djangoproject.com/ticket/29806 - Add parent_link to ForeignKey (duplicate) https://code.djangoproject.com/ticket/29807 - Custom user model with SlugField username causes `allow_unicode` error in admin (invalid) https://code.djangopr

django.contrib.auth CLI

2018-10-10 Thread Jamesie Pic
Hi all, Currently, django has user management commands createsuperuser and changepassword , which allow to automate some user management with an automated Configuration Management (CM) tool, such as Ansible. For

Standalone is_safe_url() function

2018-10-10 Thread Markus Holtermann
Hi all, Django provides a function `django.utils.is_safe_url()` to ensure that a given URL (absolute or relative) is safe to redirect to. I needed that functionality on another project that doesn't use Django at all. I thus built a standalone is-safe-url Python package that can be installed fro