From 96a905aa098dffc5d0fa32dcdaa3a22f8e6b5b62 Mon Sep 17 00:00:00 2001 From: Damian Mooyman Date: Tue, 9 Feb 2016 18:07:11 +1300 Subject: [PATCH] Update changelog --- docs/en/04_Changelogs/rc/3.3.0-rc2.md | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/docs/en/04_Changelogs/rc/3.3.0-rc2.md b/docs/en/04_Changelogs/rc/3.3.0-rc2.md index 721b4f23c..8b6d95bea 100644 --- a/docs/en/04_Changelogs/rc/3.3.0-rc2.md +++ b/docs/en/04_Changelogs/rc/3.3.0-rc2.md @@ -1,9 +1,32 @@ # 3.3.0-rc2 +## Upgrading notes + +### New permission model for Versioned DataObjects + +When adding the `Versioned` extension to dataobjects, typically it's necessary to explicitly declare +permissions on these objects in order to prevent un-published content surfacing to unauthenticated users. + +In order to better support this, versioned by default will now deny canView permissions on objects +that are not published. + +For more information on how to customise the permission model for versioned dataobjects then please +refer to the [versioned extension documentation](../../developer_guides/model/versioning). + +### Block ?stage=Stage for unauthenticated users + +By default users must now be logged in with CMS access permissions in order to change the viewing +mode of the site frontend using the `?stage` querystring parameter. + +This permission can be customised by altering the `Versioned.non_live_permissions` +config by assigning a different set of permissions. + + ## Change Log ### Bugfixes + * 2016-02-03 [15fba5a](https://github.com/silverstripe/silverstripe-framework/commit/15fba5a4cb29d8872cf42f609f6af6dd8e202de5) Remove old logout icon on retina screens (Scott Hutchinson) * 2016-02-09 [2ad490c](https://github.com/silverstripe/silverstripe-cms/commit/2ad490c3e2d256d8dcd16398631c114aa2a3370e) Prevent folders deleted on the filesystem from breaking asset interface (Damian Mooyman)