Re: Bug in delete()

2006-03-04 Thread Luke Plant
ars were the worst. And the second ten million, they were the worst too. The third ten million, I didn't enjoy at all. After that I went into a bit of a decline." (Marvin the paranoid android) Luke Plant || L.Plant.98 (at) cantab.net || http://lukeplant.me.uk/ --~--~-~--~~---

Re: Finalizing descriptor implementation

2006-03-06 Thread Luke Plant
> 2) If a related attribute currently has a value of None, should the > __get__ method return None, or raise a DoesNotExist if accessed? Does > this behaviour change if the attribute is set null=True? > > Personally, I am: > +1 returning None if null=True > +0 returning None if null=False > > 3)

Re: [Changeset] r2489 - django/branches/magic-removal/django/db/models

2006-03-06 Thread Luke Plant
rry about that, I've just committed an alternate solution that should fix it. Can you check? Thanks, Luke -- "The number you have dialed is imaginary. Please rotate your telephone by 90 degrees and try again." Luke Plant ||

Re: [Changeset] r2489 - django/branches/magic-removal/django/db/models

2006-03-06 Thread Luke Plant
On Monday 06 March 2006 23:53, Luke Plant wrote: > Sorry about that, I've just committed an alternate solution that > should fix it. Can you check? I'm lying, here. jkocherhans beat me to it and I assumed that my commit succeeded. But it is fixed anyway. Luke -- &quo

Django on python.org

2006-03-07 Thread Luke Plant
The new python site went live: http://www.python.org/ And Django is on the front page. Sweet. Luke --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "Django developers" group. To post to this group, send email to dj

Re: Finalizing descriptor implementation

2006-03-08 Thread Luke Plant
another way of getting the id without doing an extra db lookup. Luke -- "The only skills I have the patience to learn are those that have no real application in life." (Calvin and Hobbes) Luke Plant || L.Plant.98 (at) cantab.net || http://lukeplant.me.uk/ --~--~-~--~~

Re: Finalizing descriptor implementation

2006-03-09 Thread Luke Plant
Russell Keith-Magee wrote: > On 3/9/06, Luke Plant <[EMAIL PROTECTED]> wrote: > > > > On Tuesday 07 March 2006 14:49, Russell Keith-Magee wrote: > > > > > > > 3) What is to become of the _id fields for ForeignKeys? > > > > Isn't th

Re: Another bug in delete

2006-03-13 Thread Luke Plant
On Monday 13 March 2006 07:13, Adrian Holovaty wrote: > I'm catching up on more than a week's worth of unread mailing-list > messages. Is this still an open issue? I committed my changes, so no. Luke -- "Where a person wishes to attract, they should always be ignorant.&

cross-app foreign keys

2006-03-13 Thread Luke Plant
uke -- "Where a person wishes to attract, they should always be ignorant." (Jane Austen) Luke Plant || L.Plant.98 (at) cantab.net || http://lukeplant.me.uk/ --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "

Re: proposal: endif, endfor etc assume whatever follows in tag is comment

2006-03-13 Thread Luke Plant
{% comment %} blah {% endcomment %} I couldn't be bothered, especially as it actually makes the code *less* clear, because it includes so much line noise. {# blah #} seems quite nice to me. Luke -- "Whoever calls on the name of the LORD will be saved." (Romans 10:13) Luke

Descriptor syntax and performance

2006-03-16 Thread Luke Plant
uld add in some kind of explicit 'freshen' calls into the tests to make them pass. At the end of the day it's a performance/elegance tradeoff. Regards, Luke -- "You'll be glad to know, I'm going to donate all the snot I sneeze to hospitals for mucus transfusions.&quo

Re: Descriptor syntax and performance

2006-03-17 Thread Luke Plant
Max Battcher wrote: > So, I'm not sure if such an improvement is really necessary, again as > the biggest case I see _for_ it being template performance, and I'm > wondering if there might be a better way to optimize that single edge > instead (ie, is it worth it to have some caching added to > d

Re: cross-app foreign keys

2006-03-17 Thread Luke Plant
On Monday 13 March 2006 21:24, Adrian Holovaty wrote: > On 3/13/06, Luke Plant <[EMAIL PROTECTED]> wrote: > > If I create a model in my app with foreign key to the User model, > > the SQL for creating the table doesn't add a 'REFERENCES' clause: >

Re: Descriptor syntax and performance

2006-03-17 Thread Luke Plant
it yourself ain't so bad. As for that thread, the reasoning in it doesn't apply to this situation (as was explained in the thread, and yet again above). Regards, Luke -- You meet a lot of smart guys with stupid wives, but you almo

additional Admin option for fieldsets

2006-03-21 Thread Luke Plant
AIR: After your hands become coated with grease, your nose will begin to itch. Luke Plant || L.Plant.98 (at) cantab.net || http://lukeplant.me.uk/ --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "Django developers

limit_choices_to

2006-03-21 Thread Luke Plant
ta and ._meta). It's also on the ManyToMany, ManyToOne classes etc, where it seems to belong. I don't know whether it should be on Options - that doesn't seem to make sense, and it doesn't work either. Regards, Luke -- To iterate is human, to recurse, divine. L. Pe

Re: additional Admin option for fieldsets

2006-03-22 Thread Luke Plant
tever is set in the OS, which doesn't look very good if that happens to be grey. I only tested this Windows (but it affected both IE6 and Firefox IIRC). Luke -- To iterate is human, to recurse, divine. L. Peter Deutch Luke Plant || L.Plant.98 (at) cantab.net || http://lu

Re: additional Admin option for fieldsets

2006-03-23 Thread Luke Plant
ing me know. Try this: http://files.lukeplant.fastmail.fm/public/admin_with_description.jpg Luke -- I went to the Missing Persons Bureau. No one was there. Luke Plant || L.Plant.98 (at) cantab.net || http://lukeplant.me.uk/ --~--~-~--~~~---~--~~ You received

Re: Methods on related Managers

2006-03-24 Thread Luke Plant
Jacob Kaplan-Moss wrote: > I can buy that... but it doesn't just return useless data, it returns > a potentially HUGE dataset -- every single EventTime in the system! > -- which an unwary template author might stumble across and bring the > site to its knees. Surely a template author couldn't do

Re: additional Admin option for fieldsets

2006-03-24 Thread Luke Plant
versity: That which does not kill me only postpones the inevitable." (despair.com) Luke Plant || L.Plant.98 (at) cantab.net || http://lukeplant.me.uk/ --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "Django

Re: django-updates not working?

2006-03-29 Thread Luke Plant
t mods since then. I have #1555 and #1556 and r2594, all after #1554. Perhaps it's just a delay you are experiencing. Luke -- "A man in love is incomplete until he is married. Then he is finished." -- Zsa Zsa Gabor, "Newsweek" Luke Plant || L.Plant.98

browser caching of the admin

2006-03-30 Thread Luke Plant
I have recently gone live with an app mainly using Django's admin, deployed using mod_python. I've found something I never really experienced when using the developlement server and developing locally (for some unknown reason), namely that the browser caches pages generated by the admin (without

Re: browser caching of the admin

2006-03-30 Thread Luke Plant
why I came up with the other method!) Luke -- As Ralph Waldo Emerson once said, "I hate quotations." Luke Plant || L.Plant.98 (at) cantab.net || http://lukeplant.me.uk/ --~--~-~--~~~---~--~~ You received this message because you are subscribed

Re: browser caching of the admin

2006-03-30 Thread Luke Plant
port never_cache @never_cache def my_view(request) ... or: from django.utils.cache import add_never_cache_headers def my_view(request): ... response = render_to_response(...) if dont_cache_it: add_never_cache_headers(response) Regards, Luke -- As Ralph Waldo Emerson onc

Re: browser caching of the admin

2006-03-31 Thread Luke Plant
oggie rob wrote: > I'm a little concerned that you found this - I deployed a similar app > several months ago and have not heard of a single case of this. (I'm > using rev 1764.) Actually, the only place I've discovered it is at my work place, and from here it does seem to be fixed with the chan

Re: browser caching of the admin

2006-03-31 Thread Luke Plant
I've actually managed to use Firefox and LiveHeaders to capture an instance of it doing it. It occurred after deleting an object and then going back to the list view (which makes sense - I haven't added @never_cache to the list view yet). I'll analyse the log later. Luke --~--~-~--~--

Re: browser caching of the admin

2006-03-31 Thread Luke Plant
On Friday 31 March 2006 14:20, Luke Plant wrote: For those who are interested (and for the record): Here is the relevant bit of the log I was talking about: GET /admin/officers/application/ HTTP/1.1 Host: [removed] User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-GB; rv:1.8.0.1) Gecko

Re: browser caching of the admin

2006-03-31 Thread Luke Plant
e core devs think? Luke -- A woman's mind is cleaner than a man's. She changes it more often. (Oliver Herford) Luke Plant || L.Plant.98 (at) cantab.net || http://lukeplant.me.uk/ --~--~-~--~~~---~--~~ You received this message because you are subscr

Re: browser caching of the admin

2006-03-31 Thread Luke Plant
On Friday 31 March 2006 18:57, Luke Plant wrote: > So the issue here is entirely to do with an intermediate web cache, > and from what I can tell > ( http://www.w3.org/Protocols/rfc2616/rfc2616-sec13.html#sec13 ), the > cache is behaving itself perfectly well - since the page had n

Connections not being closed in m-r

2006-04-04 Thread Luke Plant
ywhere. Any ideas? Is anyone else seeing this? Luke -- "Cross country skiing is great if you live in a small country." (Steven Wright) Luke Plant || L.Plant.98 (at) cantab.net || http://lukeplant.me.uk/ --~--~-~--~~~---~--~~ You received this mes

Re: Connections not being closed in m-r

2006-04-04 Thread Luke Plant
On Tuesday 04 April 2006 21:52, Luke Plant wrote: > I have an app that is live and running m-r (yeah, I know!), and I > just got a "connection limit exceeded for non-superusers" error. It > appears that connections are not being closed at all. With every hit > I'm g

Re: Connections not being closed in m-r

2006-04-05 Thread Luke Plant
3. However, I haven't the faintest clue why this error is being thrown, why my changes made this difference, or how to fix it. It's certainly a smaller problem that the one solved, so I'll leave it for now. Luke -- "Defeat: For every winner, there are dozens of lose

Re: Connections not being closed in m-r

2006-04-05 Thread Luke Plant
On Wednesday 05 April 2006 23:07, gabor wrote: > hi Jacob, many thanks for the explanation. > > (and sorry to jump into the discussion).. > > the original poster (luke plant) said that: > > " > It appears > that connections are not being closed at all. With every

Re: ReverseSingleRelatedObjectDescriptor and limit_choices_to

2006-04-06 Thread Luke Plant
dmin choices for this object. i.e. it only limits what you seen in the admin. Luke -- "Despair: It's always darkest just before it goes pitch black." (despair.com) Luke Plant || L.Plant.98 (at) cantab.net || http://lukeplant.me.uk/ --~--~-~--~~~---~

ticket 1179

2006-04-10 Thread Luke Plant
what. Thanks, Luke -- "Dysfunction: The only consistent feature of all of your dissatisfying relationships is you." (despair.com) Luke Plant || L.Plant.98 (at) cantab.net || http://lukeplant.me.uk/ --~--~-~--~~~---~--~~ You received this message because you are s

Re: Why do templates error if you reference non-existent attributes?

2006-04-12 Thread Luke Plant
evaluated to true or false, and if you said that ifequal always evaluated to false in this case, what about {% ifnotequal %} ? Luke -- "God demonstrates his love towards us in this, that while we were still sinners, Christ died for us." (Romans 5:8) Luke Pl

CsrfMiddleware

2006-04-14 Thread Luke Plant
ing it should go in django/contrib/middleware/csrf.py (the middleware directory doesn't exist yet). I'll add documentation for it as well, of course. Regards, Luke -- "I am going to let you move around more, just to break up the mahogany." (True Quotes From Induhviduals,

Re: CsrfMiddleware

2006-04-19 Thread Luke Plant
In the absence of any objections then, I'll add it in, in the location Max suggested. Luke --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "Django developers" group. To post to this group, send email to django-deve

Re: magic-removal call for testing

2006-04-21 Thread Luke Plant
27;ve called feature freeze. Shall I still go ahead and add it? It can't affect anything else since it isn't actually used anywhere. Luke -- "If you're not part of the solution, you're part of the precipitate." (Steven Wright)

Re: unexpected results for AnyModel.objects.filter(anyfield=None)

2006-04-28 Thread Luke Plant
is a bug. I've noticed it before and not been sure why it was there. Perhaps the 'else' should throw an exception saying "use __isnull instead" ? Luke -- "I'm at peace with the world. I'm completely serene. I know why I was put here and why everything

Re: models in more files

2006-05-03 Thread Luke Plant
tackle this before then, please go ahead. Luke -- "I spilled spot remover on my dog. Now he's gone." (Steven Wright) Luke Plant || L.Plant.98 (at) cantab.net || http://lukeplant.me.uk/ --~--~-~--~~~---~--~~ You received this message because

Re: load template tag library

2011-11-16 Thread Luke Plant
er way, if your use case is "allow end users to use the template system safely", this feature wouldn't come close to doing that. If your use case is "stop front-end developers deliberately doing naughty things", I'd say the solution can't be a technical one. Rega

Re: load template tag library

2011-11-17 Thread Luke Plant
of flaws. I guess it depends on what you mean by 'safe', but we certainly haven't built the template system with this in mind. Luke -- The probability of someone watching you is proportional to the stupidity of your action. Luke Plant || http://lukeplant.me.uk/ -- You received t

Re: Django 1.4 roadmap

2011-11-29 Thread Luke Plant
Vinay has done, I think this should be deferred until after the 1.4 release, which will give the core devs time to get up to speed with how things are going to work going forward. Regards, Luke -- Noise proves nothing. Often a hen who has merely laid an egg cackles as if she laid an ast

Re: Allowing models to influence QuerySet.update

2011-11-29 Thread Luke Plant
t.update() already say that no post_save/pre_save signals are emitted. Do we really need to add that no other signals are emitted, when there aren't others that you would expect to be emitted? Regards, Luke -- Noise proves nothing. Often a hen who has merely laid an egg cackles as if she

Re: Django 1.4 roadmap

2011-11-29 Thread Luke Plant
s, etc). I think "experimental Python 3 support" might be nice for 1.5 i.e. use at own risk, please file bugs etc. Luke -- Noise proves nothing. Often a hen who has merely laid an egg cackles as if she laid an asteroid. -- Mark Twain Luke Plant || http://lukeplant.me.uk/ --

Re: Allowing models to influence QuerySet.update

2011-11-29 Thread Luke Plant
r that. https://docs.djangoproject.com/en/dev/topics/db/optimization/#use-queryset-update-and-delete Luke -- Noise proves nothing. Often a hen who has merely laid an egg cackles as if she laid an asteroid. -- Mark Twain Luke Plant || http://lukeplant.me.uk/ -- You received this message because you are

Re: Deprecate change pk + save behavior for 1.4

2011-11-30 Thread Luke Plant
ary keys. Luke -- Noise proves nothing. Often a hen who has merely laid an egg cackles as if she laid an asteroid. -- Mark Twain Luke Plant || http://lukeplant.me.uk/ -- You received this message because you are subscribed to the Google Groups "Django developers" group. To post

Re: Deprecate change pk + save behavior for 1.4

2011-12-01 Thread Luke Plant
g forward, and that allows a simpler solution for #14615, eliminating that bug from this discussion. Thanks, Luke -- The fashion wears out more apparel than the man. -- William Shakespeare Luke Plant || http://lukeplant.me.uk/ -- You received this message because you are sub

Re: Queries about CSRF design following penetration test

2011-12-02 Thread Luke Plant
or us. Paul addressed the other points I think. Regards, Luke -- The fashion wears out more apparel than the man. -- William Shakespeare Luke Plant || http://lukeplant.me.uk/ -- You received this message because you are subscribed to the Google Groups "Django developers"

Re: Python 3 port - all tests now pass on 2.7.2 and 3.2.2 with the same codebase

2011-12-03 Thread Luke Plant
Luke -- The fashion wears out more apparel than the man. -- William Shakespeare Luke Plant || http://lukeplant.me.uk/ -- You received this message because you are subscribed to the Google Groups "Django developers" group. To post to this group, send email to django-deve

Proposal: drop Python 2.5 support in Django 1.5

2011-12-10 Thread Luke Plant
about this side, but from what I've gleaned, RHEL5 goes into long term support mode in 2012 Q1 (it had Python 2.4, which we already dropped), and RHEL6 is already out, and has Python 2.6. Regards, Luke [1] http://docs.python.org/whatsnew/2.6.html [2] http://goo.gl/qNfKN -- Luke P

Re: Python 3 port - all tests now pass on 2.7.2 and 3.2.2 with the same codebase

2011-12-10 Thread Luke Plant
too concerned with planet earth. Their geocentric attitude prevents them from seeing the greater picture -- lots of planets are much worse off than earth is. Luke Plant || http://lukeplant.me.uk/ -- You received this message because you are subscribed to the Google Groups "Django developers&

Re: DoS using POST via hash algorithm collision

2012-01-20 Thread Luke Plant
velopers do JSON parsing. Luke -- "Cross country skiing is great if you live in a small country." (Steven Wright) Luke Plant || http://lukeplant.me.uk/ -- You received this message because you are subscribed to the Google Groups "Django developers" group. To post to this

Re: Python 2.5 and pickling response objects

2012-01-20 Thread Luke Plant
great if you live in a small country." (Steven Wright) Luke Plant || http://lukeplant.me.uk/ -- You received this message because you are subscribed to the Google Groups "Django developers" group. To post to this group, send email to django-developers@googlegroups.com. To unsubscri

Re: Class-based view decorators

2012-02-19 Thread Luke Plant
onvenience of flexibility in the calling convention: https://code.djangoproject.com/browser/django/trunk/django/views/decorators/cache.py?rev=17484#L7 Regards, Luke -- "I asked mom if I was a gifted child. She said they certainly wouldn't have paid for me." (Calvin and Hobbes) Luke Plant

Re: Could prefetch_related be modified to utilize select_related for ForeignKey relations?

2012-02-23 Thread Luke Plant
Luke -- "If something is hard, it's not worth doing." (Homer Simpson) Luke Plant || http://lukeplant.me.uk/ -- You received this message because you are subscribed to the Google Groups "Django developers" group. To post to this group, send email to django-develop

Re: authentication by email

2012-03-09 Thread Luke Plant
sked for an explanation both in the ticket itself and on > django-dev; no explanation was ever given. I don't know what thread you are talking about. Hanne Moa brings up the subject here and gets two replies from Russell: http://goo.gl/7p1JN Regards, Luke -- "I imagine bugs an

Re: authentication by email

2012-03-09 Thread Luke Plant
s first (like at least one of lazy foreign keys/virtual models/database migrations). It isn't, however, impossible. Our definition of 'need' is that someone is sufficiently motivated to overcome the obstacles, and contribute a solution that works for other people as well as themse

Re: Tagging 1.4 django release in Subversion

2012-03-28 Thread Luke Plant
aks, and I wouldn't want that code to be attributed to them, since I might have introduced bugs myself. Luke -- "I spilled spot remover on my dog. Now he's gone." (Steven Wright) Luke Plant || http://lukeplant.me.uk/ -- You received this message because you are subscribed to t

Re: GSoC 2012: Security Enhancements

2012-04-13 Thread Luke Plant
ositives from the CSRF middleware due to session cycling (since the CSRF token was tied to a particular session). Also, I'm not sure that it is safe for the case where the session data is exposed e.g. if the session backend actually stores the session the cookie, rather than in a database to whic

Re: GSoC 2012: Security Enhancements

2012-04-18 Thread Luke Plant
On 15/04/12 05:23, Rohan Jain wrote: > On 22:50 +0100 / 13 Apr, Luke Plant wrote: >> The reason for the strict referer checking under HTTPS is set out here: >> >> https://code.djangoproject.com/wiki/CsrfProtection >> >> Particularly, it is to fix the 'CSRF +

Re: GSoC 2012: Security Enhancements

2012-04-18 Thread Luke Plant
Sorry to reply twice, a comment on a different part: On 15/04/12 05:23, Rohan Jain wrote: > On 22:50 +0100 / 13 Apr, Luke Plant wrote: >> .. At the moment, it seems that few browsers send the >> 'Origin' header for normal HTML requests. (Recent versions of Chrome, >&

Re: GSoC 2012: Security Enhancements

2012-04-18 Thread Luke Plant
his one I think: http://lists.webappsec.org/pipermail/websecurity_lists.webappsec.org/2011-February/007533.html Luke -- "My capacity for happiness you could fit into a matchbox without taking out the matches first." (Marvin the paranoid android) Luke Plant || http://lukeplant.me.uk/ -- You received this

Re: GitHub migration planning

2012-04-20 Thread Luke Plant
ir own ticket solutions (Puppet uses Redmine, Chef uses Jira). The Pinax folks wrote their own issue system rather than using GitHub's! """ Cheers, Luke -- "My capacity for happiness you could fit into a matchbox without taking out the matches first." (Marvin the

Re: GitHub migration planning

2012-04-21 Thread Luke Plant
rac also has pretty nice reporting abilities, and report building abilities: https://code.djangoproject.com/wiki/Reports No-one thinks Trac is ideal, it's just much better than GitHub Issues which, in its own words, is a "lightweight" issue management system. Luke -- "My ca

Re: GitHub migration planning

2012-04-21 Thread Luke Plant
needed a BDFL decision, there was no point making the pretence of discussion in a wider forum. (Adrian/Jacob feel may correct me if I'm guessing wrongly). Luke -- "My capacity for happiness you could fit into a matchbox without taking out the matches first." (Marvin the

Re: Django's CVB - Roadmap?

2012-06-04 Thread Luke Plant
you have some gotchas with things like POST requests. I found I had to write something like this snippet: https://gist.github.com/2596285 But it's not ideal in a number of ways, like needing its own documentation, since it doesn't just set parameters on ListView. Luke -- O

Re: Will django escaping ever consider context of javascript and CSS?

2012-06-07 Thread Luke Plant
elevant previous discussions: http://goo.gl/XZ7Pt http://goo.gl/T8tkx Luke -- OSBORN'S LAW Variables won't, constants aren't. Luke Plant || http://lukeplant.me.uk/ -- You received this message because you are subscribed to the Google Groups "Django developer

Re: startproject template context

2012-06-07 Thread Luke Plant
an exception, not the default template rendered with "tempate=/home/me/foo". The feature given in the patch on ticket #18277, is however, much more like it - you have to pass the context using --add-context Regards, Luke -- OSBORN'S LAW Variables won't, constants aren

Git questions

2012-06-08 Thread Luke Plant
. I've observed this several times. If I do 'git fetch upstream', rather than 'git pull upstream master', then the pointers always update, but I thought the whole point of doing 'pull' was 'pull=fetch then merge'. Am I doing something wrong? Thanks i

json vs simplejson

2012-06-11 Thread Luke Plant
tigate the impact of this. It's likely to crop up in all kinds of horrible places, deep in libraries that you can't do much about. In my case I was loading config, including passwords, from a config file in JSON, and the password was now exploding inside smtplib because it was a unicode

Re: json vs simplejson

2012-06-12 Thread Luke Plant
s I probably not the only one affected by this, if it's happened on two quite different machines. Looking at this discussion: http://stackoverflow.com/questions/712791/json-and-simplejson-module-differences-in-python it seems that lots of people don't have the C extension for json (reporting jso

Re: json vs simplejson

2012-06-12 Thread Luke Plant
uses simplejson.dumps() (either via 'import simplejson' or 'import django.utils.simplejson') will break. I found this already with django-piston. I think we at least need a bigger section in the release notes about this. Luke -- OSBORN'S LAW Variables won't, const

Re: json vs simplejson

2012-06-12 Thread Luke Plant
**kwargs) But like that, it would create more problems if the json module ever gained that keyword argument in the future. Luke -- OSBORN'S LAW Variables won't, constants aren't. Luke Plant || http://lukeplant.me.uk/ -- You received this message because you are subscri

ModelForms and the Rails input handling vulnerability

2012-06-12 Thread Luke Plant
r options to bring to the table, please do. Apologies to the core devs if I missed or misrepresented something. Thanks, Luke [1] http://chrisacky.posterous.com/github-you-have-let-us-all-down [2] http://weblog.rubyonrails.org/2012/3/21/strong-parameters/ -- OSBORN'S LAW Variables w

Re: QuerySet refactoring

2012-06-13 Thread Luke Plant
ds on when we think 'Django 2.0' will happen). If you've got a particular interest in the ORM, you might be interested in that proposal. I completely agree regarding how to handle NoSQL as well. Regards, Luke -- "Outside of a dog, a book is a man's best friend... insid

Re: Reg Memcache issue.

2012-06-22 Thread Luke Plant
is the django-users list, or file a ticket on our Trac instance (code.djangoproject.com) if you think you've found a bug in Django BTW, there is no cache_anonymous decorator in Django, so it is likely your problem is elsewhere. Thanks, Luke -- Parenthetical remarks (however rele

XSS and string interpolation

2012-06-28 Thread Luke Plant
#x27;t ask "why did this happen? What is the root cause? How can we stop it ever happening again?" We need to be much more rigorous about applying things like the "5 Whys" http://en.wikipedia.org/wiki/5_Whys especially for security problems. Regards, Luke --

Re: XSS and string interpolation

2012-06-28 Thread Luke Plant
t if it wasn't fit for purpose? :-) Actually my main objection is that it's a bit long, the above is just rationalisation. Some other alternatives: build_html, build_html_safe, format_html Luke -- Parenthetical remarks (however relevant) are unnecessary Luke Plant || http://lukeplan

Proposal: use SQLAlchemy Core for query generation

2012-06-30 Thread Luke Plant
e Bayer for the time he took just looking at this proposal, and for his feedback, some of which I've incorporated into this. Comments? It would be good to get other developers' comments on the whole idea of "Django 2.0" as well - when do we see it happening? Regards, Luke [1] http:/

Re: Proposal: use SQLAlchemy Core for query generation

2012-06-30 Thread Luke Plant
#x27;t need most 3rd party DB backends, or can plug them in via SQLAlchemy's extension points, which are cleaner than ours from what I can see. Luke -- Parenthetical remarks (however relevant) are unnecessary Luke Plant || http://lukeplant.me.uk/ -- You received this message because you

Re: Proposal: use SQLAlchemy Core for query generation

2012-06-30 Thread Luke Plant
t Django does. It would be surprising if it was really doing the same thing! I think it's one of those things where we really won't know the impact until we've got most of the way there, and even then differences of approach could make all the difference. Luke -- Parenthetical rema

Re: I think adding a "first" method to the QuerySet be useful.

2012-07-03 Thread Luke Plant
ed by first(): {% if items %} {{ items.0.something }} {% endif %} Luke -- Parenthetical remarks (however relevant) are unnecessary Luke Plant || http://lukeplant.me.uk/ -- You received this message because you are subscribed to the Google Groups "Django developers" group. To post to t

Re: Skip session save on 500 responses

2012-07-05 Thread Luke Plant
e -- "Pessimism: Every dark cloud has a silver lining, but lightning kills hundreds of people each year trying to find it." (despair.com) Luke Plant || http://lukeplant.me.uk/ -- You received this message because you are subscribed to the Google Groups "Django developers" g

Re: Skip session save on 500 responses

2012-07-09 Thread Luke Plant
ng to find it." (despair.com) Luke Plant || http://lukeplant.me.uk/ -- You received this message because you are subscribed to the Google Groups "Django developers" group. To post to this group, send email to django-developers@googlegroups.com. To unsubscribe from this group

Re: GSoC Check-in: Security Enhancements

2012-07-23 Thread Luke Plant
e else is that people tend to assume you're pretentious." (despair.com) Luke Plant || http://lukeplant.me.uk/ -- You received this message because you are subscribed to the Google Groups "Django developers" group. To post to this group, send email to django-developers@g

OT: security announcements for Django-related libraries

2012-07-23 Thread Luke Plant
e group is moderated, so I've got a couple of replies that haven't shown up yet. Luke -- "Pretension: The downside of being better than everyone else is that people tend to assume you're pretentious." (despair.com) Luke Plant || http://lukeplant.me.uk/ -- You received t

Re: OT: security announcements for Django-related libraries

2012-07-23 Thread Luke Plant
be great. > > On Mon, Jul 23, 2012 at 5:55 AM, Luke Plant <mailto:l.plant...@cantab.net>> wrote: > > Hi all, > > I started a thread on the 'Python security' list about the need for a > place for 3rd party Django/Python libraries to announce secu

Re: GSoC Check-in: Security Enhancements

2012-07-23 Thread Luke Plant
3–11%) of users >> This makes strict referer checking a non-started, and lax referer checking (only check it if it is present) has known flaws. Regards, Luke -- "Pretension: The downside of being better than everyone else is that people tend to assume you're pretentious."

Re: ORM refactoring, part 2

2012-08-27 Thread Luke Plant
seems like a bad idea to you, > then please say so (preferably before I commit anything)... > > I am sorry if I haven't worked on other patches I thought I had time > to work on. The core ORM refactorings are IMO really important to work > on, and thus they have bypassed some other i

Re: Backporting some Python 3 support features to 1.4.x?

2012-09-06 Thread Luke Plant
I'm +1 on adding forwards compatibility to 1.4.X, assuming a safe patch. Luke -- "In your presence there is fullness of joy; at your right hand are pleasures forevermore" Psalm 16:11 Luke Plant || http://lukeplant.me.uk/ -- You received this message because you are subscribed t

Re: Schema Alteration update

2012-10-11 Thread Luke Plant
make life hard for them. I don't know what that means in practice, but if we got feedback from the developers of those other solutions it would be good. We might need something like a 'syncdb --ignore-migrations' option. Luke -- "Because Your lovingkindness is better t

Re: Django 1.5: AUTH_USER_MODEL and GeoManager

2012-10-11 Thread Luke Plant
ld post this. If you could create a ticket, that will ensure this is not forgotten. It sounds like it should be a release blocker. Luke -- "Because Your lovingkindness is better than life, My lips shall praise You." (Ps 63:3) Luke Plant || http://lukeplant.me.uk/ -- You received

contrib.markup deprecation

2012-10-13 Thread Luke Plant
Martin Mahner, the author of django-rstify to participate in this thread. I think we should have recommendations for alternatives for rendering markdown as well. Regards, Luke -- "Christ Jesus came in to the world to save sinners" (1 Timothy 1:15) Luke Plant || http://lukeplant.me.uk/ --

Re: proposal: post-collectstatic signal

2012-11-14 Thread Luke Plant
ust be in want of a wife." (Jane Austen) Luke Plant || http://lukeplant.me.uk/ -- You received this message because you are subscribed to the Google Groups "Django developers" group. To post to this group, send email to django-developers@googlegroups.com. To unsubscribe from this

Re: Could prefetch_related be modified to utilize select_related for ForeignKey relations?

2012-11-26 Thread Luke Plant
valents of both select_related and prefetch_related. What I'm saying is that in the absence of that better API, or some way of specifying the query you want, we shouldn't guess and convert one optimisation into another. Luke -- OSBORN'S LAW Variables won't, co

Re: Relative path support for TEMPLATE_DIRS and others in settings.py (django ticket 694)

2012-12-28 Thread Luke Plant
template, and updating the help text for TEMPLATE_DIRS and STATICFILES_DIRS to mention it. Luke -- The fashion wears out more apparel than the man. -- William Shakespeare Luke Plant || http://lukeplant.me.uk/ -- You received this message because you are subscribed to the Google Grou

Re: Relative path support for TEMPLATE_DIRS and others in settings.py (django ticket 694)

2012-12-30 Thread Luke Plant
nd visualise world peace for an hour, imagine how serene and quiet it would be until the looting started" -- Anon Luke Plant || http://lukeplant.me.uk/ -- You received this message because you are subscribed to the Google Groups "Django developers" group. To post to this

Re: Relative path support for TEMPLATE_DIRS and others in settings.py (django ticket 694)

2013-01-02 Thread Luke Plant
tc., as mentioned by Shai. Luke -- A mosquito cried out in pain: "A chemist has poisoned my brain!" The cause of his sorrow was para-dichloro- diphenyltrichloroethane Luke Plant || http://lukeplant.me.uk/ -- You received this message because you are subscribed to the Google Gro

<    1   2   3   4   5   6   7   8   >