Re: Django formset hidden id field

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=YFuR
-----END PGP SIGNATURE-----
Hi Rob,

On 05/03/2016 12:13 PM, Rob Ladd wrote:
> Carl Meyer said:
>
> "Whatever queryset you pass to the model formset limits the
> available rows for editing. The end user can edit the PK to refer to any
> item in that queryset, but not any item in the table. "
>
> That's not true, based on my observation.
> As long as the PK refers to any object of that type, it can be edited by
> monkeying with the hidden id field.

I replied to this in the other thread you started:
https://groups.google.com/d/topic/django-users/tJpKWbij1B0/discussion

Short version, I can't reproduce the behavior you describe.

Carl

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at https://groups.google.com/group/django-users.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/572D2673.2010800%40oddbird.net.
For more options, visit https://groups.google.com/d/optout.