silverstripe-framework/docs/en/04_Changelogs/rc/3.3.0-rc2.md

# 3.3.0-rc2

## Upgrading notes

### New permission model for Versioned DataObjects

When adding the `Versioned` extension to dataobjects, typically it's necessary to explicitly declare
permissions on these objects in order to prevent un-published content surfacing to unauthenticated users.

In order to better support this, versioned by default will now deny canView permissions on objects
that are not published.

For more information on how to customise the permission model for versioned dataobjects then please
refer to the [versioned extension documentation](../../developer_guides/model/versioning).

### Block ?stage=Stage for unauthenticated users

By default users must now be logged in with CMS access permissions in order to change the viewing
mode of the site frontend using the `?stage` querystring parameter.

This permission can be customised by altering the `Versioned.non_live_permissions`
config by assigning a different set of permissions.


<!--- Changes below this line will be automatically regenerated -->

## Change Log

### Bugfixes

 * 2016-02-03 [15fba5a](https://github.com/silverstripe/silverstripe-framework/commit/15fba5a4cb29d8872cf42f609f6af6dd8e202de5) Remove old logout icon on retina screens (Scott Hutchinson)
 * 2016-02-09 [2ad490c](https://github.com/silverstripe/silverstripe-cms/commit/2ad490c3e2d256d8dcd16398631c114aa2a3370e) Prevent folders deleted on the filesystem from breaking asset interface (Damian Mooyman)