byashimov / django-controlcenter

Set of widgets to build dashboards for Django projects
BSD 3-Clause "New" or "Revised" License
989 stars 85 forks source link

Invalid URLs documentation for `django >= 3.2`. #66

Closed fabiocaccamo closed 1 year ago

fabiocaccamo commented 1 year ago

Since django 3.2, AdminSite.final_catch_all_view has been introduced:

A boolean value that determines whether to add a final catch-all view to the admin that redirects unauthenticated users to the login page. By default, it is set to True.

:warning: Setting this to False is not recommended as the view protects against a potential model enumeration privacy issue.

The url of any dashboard results in a 404 error.