i18n: newforms - label and help_text don't work with _('')

2007-03-12 Thread Boris Erdmann
Hi, sorry for cross posting: The __init__ method of the newforms.Field class normalizes labels and help_text by using smart_unicode(). This seems to break gettext_lazy. The marked string gets evaluated to early? When accessing a newly started http server with two browsers with different accep

Re: select_related() changes

2007-03-03 Thread Boris Erdmann
The main problem with depth=1 seems to be, that the query generator still spans over too many tables (watching the mysql.log i can see tables fully joined that definitvly do not belong to level 1). Thus the returned data set will surely confuse django. Looking at django/db/models/query.py reveals

[SECURITY] logout() doesn't delete session data while docs state so

2007-02-19 Thread Boris Erdmann
In current django >= 0.95 logout() simply removes the user object id from a running session. Thus, if the browser stays open and somebody else log in, they get access to all session bound data of the previous user. http://www.djangoproject.com/documentation/sessions/#clearing-the-session-table s

authenticate() allowed to raise exceptions?

2007-02-13 Thread Boris Erdmann
Hello Group, I would like to contribute an OpenID consumer auth backend and wonder whether it is good style for authenticate() to raise an exception or not? The question is motivated by the fact that OpenID authentication is a two phase procedure and authenticate() is bound to returning a valid