diff --git a/docs/en/04_Changelogs/3.3.0.md b/docs/en/04_Changelogs/3.3.0.md index 0ca0169e6..0c56d7686 100644 --- a/docs/en/04_Changelogs/3.3.0.md +++ b/docs/en/04_Changelogs/3.3.0.md @@ -11,7 +11,7 @@ In order to better support this, versioned by default will now deny canView perm that are not published. For more information on how to customise the permission model for versioned dataobjects then please -refer to the [versioned extension documentation](../developer_guides/model/versioned). +refer to the [versioned extension documentation](../developer_guides/model/versioning). ### Block ?stage=Stage for unauthenticated users diff --git a/docs/en/04_Changelogs/beta/3.3.0-beta1.md b/docs/en/04_Changelogs/beta/3.3.0-beta1.md index 13bdd9928..769cb2bc0 100644 --- a/docs/en/04_Changelogs/beta/3.3.0-beta1.md +++ b/docs/en/04_Changelogs/beta/3.3.0-beta1.md @@ -1,5 +1,26 @@ # 3.3.0-beta1 +## Upgrading notes + +### New permission model for Versioned DataObjects + +When adding the `Versioned` extension to dataobjects, typically it's necessary to explicitly declare +permissions on these objects in order to prevent un-published content surfacing to unauthenticated users. + +In order to better support this, versioned by default will now deny canView permissions on objects +that are not published. + +For more information on how to customise the permission model for versioned dataobjects then please +refer to the [versioned extension documentation](../../developer_guides/model/versioning). + +### Block ?stage=Stage for unauthenticated users + +By default users must now be logged in with CMS access permissions in order to change the viewing +mode of the site frontend using the `?stage` querystring parameter. + +This permission can be customised by altering the `Versioned.non_live_permissions` +config by assigning a different set of permissions. + ## Change Log