wagtail 6.1.2__py3-none-any.whl → 6.2rc1__py3-none-any.whl

wagtail/admin/views/page_privacy.py

@@ -7,7 +7,7 @@ from wagtail.models import Page, PageViewRestriction
 
 
 def set_privacy(request, page_id):
-    page = get_object_or_404(Page, id=page_id)
+    page = get_object_or_404(Page, id=page_id).specific_deferred
     page_perms = page.permissions_for_user(request.user)
     if not page_perms.can_set_view_restrictions():
         raise PermissionDenied
@@ -16,13 +16,17 @@ def set_privacy(request, page_id):
     restrictions = page.get_view_restrictions().order_by("page__depth")
     if restrictions:
         restriction = restrictions[0]
-        restriction_exists_on_ancestor = restriction.page != page
+        restriction_exists_on_ancestor = restriction.page.id != page.id
     else:
         restriction = None
         restriction_exists_on_ancestor = False
 
     if request.method == "POST":
-        form = PageViewRestrictionForm(request.POST, instance=restriction)
+        form = PageViewRestrictionForm(
+            request.POST,
+            instance=restriction,
+            private_page_options=page.private_page_options,
+        )
         if form.is_valid() and not restriction_exists_on_ancestor:
             if form.cleaned_data["restriction_type"] == PageViewRestriction.NONE:
                 # remove any existing restriction
@@ -49,10 +53,15 @@ def set_privacy(request, page_id):
     else:  # request is a GET
         if not restriction_exists_on_ancestor:
             if restriction:
-                form = PageViewRestrictionForm(instance=restriction)
+                form = PageViewRestrictionForm(
+                    instance=restriction, private_page_options=page.private_page_options
+                )
             else:
                 # no current view restrictions on this page
-                form = PageViewRestrictionForm(initial={"restriction_type": "none"})
+                form = PageViewRestrictionForm(
+                    initial={"restriction_type": "none"},
+                    private_page_options=page.private_page_options,
+                )
 
     if restriction_exists_on_ancestor:
         # display a message indicating that there is a restriction at ancestor level -
@@ -65,6 +74,12 @@ def set_privacy(request, page_id):
                 "page_with_restriction": restriction.page,
             },
         )
+    elif len(page.private_page_options) == 0:
+        return render_modal_workflow(
+            request,
+            "wagtailadmin/page_privacy/no_privacy.html",
+            None,
+        )
     else:
         # no restriction set at ancestor level - can set restrictions here
         return render_modal_workflow(

wagtail/admin/views/pages/choose_parent.py

@@ -1,4 +1,5 @@
 from django.contrib.admin.utils import quote
+from django.contrib.contenttypes.models import ContentType
 from django.shortcuts import redirect
 from django.urls import reverse
 from django.utils.functional import cached_property
@@ -10,6 +11,7 @@ from django.views.generic import FormView
 from wagtail.admin.forms.pages import ParentChooserForm
 from wagtail.admin.views.generic.base import WagtailAdminTemplateMixin
 from wagtail.models import Page
+from wagtail.permissions import page_permission_policy
 
 
 class ChooseParentView(WagtailAdminTemplateMixin, FormView):
@@ -18,6 +20,66 @@ class ChooseParentView(WagtailAdminTemplateMixin, FormView):
     index_url_name = None
     page_title = gettext_lazy("Choose parent")
 
+    def get_valid_parent_pages(self, user):
+        """
+        Identifies possible parent pages for the current user by first looking
+        at allowed_parent_page_models() on self.model to limit options to the
+        correct type of page, then checking permissions on those individual
+        pages to make sure we have permission to add a subpage to it.
+        """
+        # Get queryset of pages where this page type can be added
+        allowed_parent_page_content_types = list(
+            ContentType.objects.get_for_models(
+                *self.model.allowed_parent_page_models()
+            ).values()
+        )
+        allowed_parent_pages = Page.objects.filter(
+            content_type__in=allowed_parent_page_content_types
+        )
+
+        # Get queryset of pages where the user has permission to add subpages
+        if user.is_superuser:
+            pages_where_user_can_add = Page.objects.all()
+        else:
+            pages_where_user_can_add = Page.objects.none()
+
+            perms = {
+                perm
+                for perm in page_permission_policy.get_cached_permissions_for_user(user)
+                if perm.permission.codename == "add_page"
+            }
+
+            for perm in perms:
+                # user has add permission on any subpage of perm.page
+                # (including perm.page itself)
+                pages_where_user_can_add |= Page.objects.descendant_of(
+                    perm.page, inclusive=True
+                )
+
+        # Combine them
+        return allowed_parent_pages & pages_where_user_can_add
+
+    def get(self, request, *args, **kwargs):
+        parents = self.get_valid_parent_pages(request.user)
+
+        # Only fetch the IDs for the first two parents to check if there's only
+        # one valid parent, and if so, redirect to the add page view with that
+        # parent pre-selected
+        parent_ids = parents.values_list("pk", flat=True)[:2]
+        if len(parent_ids) == 1:
+            parent_id = quote(parent_ids[0])
+            model_opts = self.model._meta
+            return redirect(
+                "wagtailadmin_pages:add",
+                model_opts.app_label,
+                model_opts.model_name,
+                parent_id,
+            )
+
+        # The page can be added in multiple places, so proceed with rendering
+        # the view's form so that the parent can be specified
+        return super().get(request, *args, **kwargs)
+
     def get_form(self):
         if self.request.method == "POST":
             return ParentChooserForm(self.model, self.request.user, self.request.POST)

wagtail/admin/views/pages/edit.py

@@ -17,7 +17,9 @@ from wagtail.actions.publish_page_revision import PublishPageRevisionAction
 from wagtail.admin import messages
 from wagtail.admin.action_menu import PageActionMenu
 from wagtail.admin.mail import send_notification
+from wagtail.admin.models import EditingSession
 from wagtail.admin.ui.components import MediaContainer
+from wagtail.admin.ui.editing_sessions import EditingSessionsModule
 from wagtail.admin.ui.side_panels import (
     ChecksSidePanel,
     CommentsSidePanel,
@@ -36,6 +38,7 @@ from wagtail.models import (
     Page,
     PageSubscription,
     WorkflowState,
+    get_default_page_content_type,
 )
 from wagtail.utils.timestamps import render_timestamp
 
@@ -878,6 +881,30 @@ class EditView(WagtailAdminTemplateMixin, HookResponseMixin, View):
             side_panels.append(CommentsSidePanel(self.page, self.request))
         return MediaContainer(side_panels)
 
+    def get_editing_sessions(self):
+        EditingSession.cleanup()
+        content_type = get_default_page_content_type()
+        session = EditingSession.objects.create(
+            user=self.request.user,
+            content_type=content_type,
+            object_id=self.page.pk,
+            last_seen_at=timezone.now(),
+        )
+        return EditingSessionsModule(
+            session,
+            reverse(
+                "wagtailadmin_editing_sessions:ping",
+                args=("wagtailcore", "page", self.page.pk, session.id),
+            ),
+            reverse(
+                "wagtailadmin_editing_sessions:release",
+                args=(session.id,),
+            ),
+            [],
+            content_type,
+            self.page.latest_revision_id,
+        )
+
     def get_context_data(self, **kwargs):
         context = super().get_context_data(**kwargs)
         user_perms = self.page.permissions_for_user(self.request.user)
@@ -925,6 +952,7 @@ class EditView(WagtailAdminTemplateMixin, HookResponseMixin, View):
                 and user_perms.can_unlock(),
                 "locale": self.locale,
                 "media": media,
+                "editing_sessions": self.get_editing_sessions(),
             }
         )
 

wagtail/admin/views/reports/aging_pages.py

@@ -1,6 +1,6 @@
 import django_filters
 from django.contrib.auth import get_user_model
-from django.core.exceptions import PermissionDenied, ValidationError
+from django.core.exceptions import ValidationError
 from django.db.models import OuterRef, Subquery
 from django.utils.translation import gettext_lazy as _
 
@@ -29,10 +29,12 @@ class AgingPagesReportFilterSet(WagtailFilterSet):
 
 
 class AgingPagesView(PageReportView):
-    template_name = "wagtailadmin/reports/aging_pages.html"
-    title = _("Aging pages")
+    results_template_name = "wagtailadmin/reports/aging_pages_results.html"
+    page_title = _("Aging pages")
     header_icon = "time"
     filterset_class = AgingPagesReportFilterSet
+    index_url_name = "wagtailadmin_reports:aging_pages"
+    index_results_url_name = "wagtailadmin_reports:aging_pages_results"
     export_headings = {
         "status_string": _("Status"),
         "last_published_at": _("Last published at"),
@@ -46,6 +48,7 @@ class AgingPagesView(PageReportView):
         "last_published_by_user",
         "content_type",
     ]
+    any_permission_required = ["add", "change", "publish"]
 
     def __init__(self, **kwargs):
         super().__init__(**kwargs)
@@ -110,10 +113,3 @@ class AgingPagesView(PageReportView):
         )
 
         return super().get_queryset()
-
-    def dispatch(self, request, *args, **kwargs):
-        if not page_permission_policy.user_has_any_permission(
-            request.user, ["add", "change", "publish"]
-        ):
-            raise PermissionDenied
-        return super().dispatch(request, *args, **kwargs)

wagtail/admin/views/reports/audit_logging.py

@@ -2,7 +2,6 @@ import datetime
 from collections import defaultdict
 
 import django_filters
-from django import forms
 from django.contrib.auth import get_user_model
 from django.contrib.contenttypes.models import ContentType
 from django.db.models import IntegerField, Value
@@ -12,9 +11,8 @@ from django.utils.translation import gettext_lazy as _
 from wagtail.admin.admin_url_finder import AdminURLFinder
 from wagtail.admin.filters import (
     ContentTypeFilter,
-    DateRangePickerWidget,
-    WagtailFilterSet,
 )
+from wagtail.admin.views.pages.history import PageHistoryFilterSet
 from wagtail.coreutils import get_content_type_label
 from wagtail.log_actions import registry as log_action_registry
 from wagtail.models import PageLogEntry
@@ -52,62 +50,35 @@ def get_actions_for_filter(user):
     ]
 
 
-class SiteHistoryReportFilterSet(WagtailFilterSet):
-    action = django_filters.ChoiceFilter(
-        label=_("Action"),
-        # choices are set dynamically in __init__()
-    )
-    hide_commenting_actions = django_filters.BooleanFilter(
-        label=_("Hide commenting actions"),
-        method="filter_hide_commenting_actions",
-        widget=forms.CheckboxInput,
-    )
-    timestamp = django_filters.DateFromToRangeFilter(
-        label=_("Date"), widget=DateRangePickerWidget
-    )
+class SiteHistoryReportFilterSet(PageHistoryFilterSet):
     label = django_filters.CharFilter(label=_("Name"), lookup_expr="icontains")
-    user = django_filters.ModelChoiceFilter(
-        label=_("User"),
-        field_name="user",
-        queryset=lambda request: get_users_for_filter(request.user),
-    )
     object_type = ContentTypeFilter(
         label=_("Type"),
         method="filter_object_type",
         queryset=lambda request: get_content_types_for_filter(request.user),
     )
 
-    def filter_hide_commenting_actions(self, queryset, name, value):
-        if value:
-            queryset = queryset.exclude(action__startswith="wagtail.comments")
-        return queryset
-
     def filter_object_type(self, queryset, name, value):
         return queryset.filter_on_content_type(value)
 
+    def get_action_choices(self):
+        return get_actions_for_filter(self.request.user)
+
+    def get_user_choices(self):
+        return get_users_for_filter(self.request.user)
+
     class Meta:
         model = PageLogEntry
-        fields = [
-            "object_type",
-            "label",
-            "action",
-            "user",
-            "timestamp",
-            "hide_commenting_actions",
-        ]
-
-    def __init__(self, *args, **kwargs):
-        super().__init__(*args, **kwargs)
-        self.filters["action"].extra["choices"] = get_actions_for_filter(
-            self.request.user
-        )
+        fields = []
 
 
 class LogEntriesView(ReportView):
-    template_name = "wagtailadmin/reports/site_history.html"
-    title = _("Site history")
+    results_template_name = "wagtailadmin/reports/site_history_results.html"
+    page_title = _("Site history")
     header_icon = "history"
     filterset_class = SiteHistoryReportFilterSet
+    index_url_name = "wagtailadmin_reports:site_history"
+    index_results_url_name = "wagtailadmin_reports:site_history_results"
 
     export_headings = {
         "object_id": _("ID"),

wagtail/admin/views/reports/base.py

@@ -1,13 +1,38 @@
+from warnings import warn
+
 from django.utils.translation import gettext_lazy as _
 
-from wagtail.admin.views.generic.base import BaseListingView
+from wagtail.admin.views.generic import BaseListingView, PermissionCheckedMixin
 from wagtail.admin.views.mixins import SpreadsheetExportMixin
+from wagtail.permissions import page_permission_policy
+from wagtail.utils.deprecation import RemovedInWagtail70Warning
 
 
-class ReportView(SpreadsheetExportMixin, BaseListingView):
+class ReportView(SpreadsheetExportMixin, PermissionCheckedMixin, BaseListingView):
     template_name = "wagtailadmin/reports/base_report.html"
+    results_template_name = "wagtailadmin/reports/base_report_results.html"
     title = ""
     paginate_by = 50
+    _show_breadcrumbs = True
+
+    def get_breadcrumbs_items(self):
+        return super().get_breadcrumbs_items() + [
+            {"url": "", "label": self.get_page_title()}
+        ]
+
+    def get_page_title(self):
+        if self.page_title:
+            return self.page_title
+        # WagtailAdminTemplateMixin uses `page_title`, but the documented approach
+        # for ReportView used `title`, so we need to support both during the
+        # deprecation period. When `title` is removed, this and the `get_context_data`
+        # overrides can be removed.
+        warn(
+            f"The `title` attribute in `{self.__class__.__name__}` (a `ReportView` subclass) "
+            "is deprecated. Use `page_title` instead.",
+            RemovedInWagtail70Warning,
+        )
+        return self.title
 
     def get_filtered_queryset(self):
         return self.filter_queryset(self.get_queryset())
@@ -28,7 +53,7 @@ class ReportView(SpreadsheetExportMixin, BaseListingView):
 
     def get_context_data(self, *args, **kwargs):
         context = super().get_context_data(*args, **kwargs)
-        context["title"] = self.title
+        context["title"] = self.get_page_title()
         return context
 
     def render_to_response(self, context, **response_kwargs):
@@ -40,7 +65,7 @@ class ReportView(SpreadsheetExportMixin, BaseListingView):
 
 
 class PageReportView(ReportView):
-    template_name = "wagtailadmin/reports/base_page_report.html"
+    results_template_name = "wagtailadmin/reports/base_page_report_results.html"
     export_headings = {
         "latest_revision_created_at": _("Updated"),
         "status_string": _("Status"),
@@ -52,3 +77,5 @@ class PageReportView(ReportView):
         "status_string",
         "content_type.model_class._meta.verbose_name.title",
     ]
+    context_object_name = "pages"
+    permission_policy = page_permission_policy

wagtail/admin/views/reports/locked_pages.py

@@ -3,7 +3,6 @@ import datetime
 import django_filters
 from django.conf import settings
 from django.contrib.auth import get_user_model
-from django.core.exceptions import PermissionDenied
 from django.utils.translation import gettext_lazy as _
 
 from wagtail.admin.filters import DateRangePickerWidget, WagtailFilterSet
@@ -34,14 +33,17 @@ class LockedPagesReportFilterSet(WagtailFilterSet):
 
 
 class LockedPagesView(PageReportView):
-    template_name = "wagtailadmin/reports/locked_pages.html"
-    title = _("Locked pages")
+    results_template_name = "wagtailadmin/reports/locked_pages_results.html"
+    page_title = _("Locked pages")
     header_icon = "lock"
     list_export = PageReportView.list_export + [
         "locked_at",
         "locked_by",
     ]
     filterset_class = LockedPagesReportFilterSet
+    index_url_name = "wagtailadmin_reports:locked_pages"
+    index_results_url_name = "wagtailadmin_reports:locked_pages_results"
+    permission_required = "unlock"
 
     def get_filename(self):
         return "locked-pages-report-{}".format(
@@ -65,8 +67,3 @@ class LockedPagesView(PageReportView):
 
         self.queryset = pages
         return super().get_queryset()
-
-    def dispatch(self, request, *args, **kwargs):
-        if not page_permission_policy.user_has_permission(request.user, "unlock"):
-            raise PermissionDenied
-        return super().dispatch(request, *args, **kwargs)

wagtail/admin/views/reports/page_types_usage.py

@@ -1,6 +1,5 @@
 import django_filters
 from django.conf import settings
-from django.core.exceptions import PermissionDenied
 from django.db.models import Count, F, OuterRef, Q, Subquery
 from django.utils.translation import gettext_lazy as _
 
@@ -96,10 +95,14 @@ class PageTypesUsageReportFilterSet(WagtailFilterSet):
 
 
 class PageTypesUsageReportView(ReportView):
-    template_name = "wagtailadmin/reports/page_types_usage.html"
-    title = _("Page types usage")
+    results_template_name = "wagtailadmin/reports/page_types_usage_results.html"
+    page_title = _("Page types usage")
     header_icon = "doc-empty-inverse"
     filterset_class = PageTypesUsageReportFilterSet
+    index_url_name = "wagtailadmin_reports:page_types_usage"
+    index_results_url_name = "wagtailadmin_reports:page_types_usage_results"
+    permission_policy = page_permission_policy
+    any_permission_required = ["add", "change", "publish"]
 
     def __init__(self, **kwargs):
         super().__init__(**kwargs)
@@ -143,10 +146,3 @@ class PageTypesUsageReportView(ReportView):
         queryset = queryset.order_by("-count", "app_label", "model")
 
         return queryset
-
-    def dispatch(self, request, *args, **kwargs):
-        if not page_permission_policy.user_has_any_permission(
-            request.user, ["add", "change", "publish"]
-        ):
-            raise PermissionDenied
-        return super().dispatch(request, *args, **kwargs)

wagtail/admin/views/reports/workflows.py

@@ -4,9 +4,11 @@ import django_filters
 from django import forms
 from django.contrib.auth import get_user_model
 from django.contrib.contenttypes.models import ContentType
-from django.core.exceptions import PermissionDenied
 from django.db.models import CharField, Q
 from django.db.models.functions import Cast
+from django.urls import reverse
+from django.utils.functional import cached_property
+from django.utils.translation import gettext
 from django.utils.translation import gettext_lazy as _
 
 from wagtail.admin.filters import (
@@ -15,6 +17,7 @@ from wagtail.admin.filters import (
     WagtailFilterSet,
 )
 from wagtail.admin.utils import get_latest_str
+from wagtail.admin.widgets.button import HeaderButton
 from wagtail.coreutils import get_content_type_label
 from wagtail.models import (
     Task,
@@ -135,10 +138,14 @@ class WorkflowTasksReportFilterSet(WagtailFilterSet):
 
 
 class WorkflowView(ReportView):
-    template_name = "wagtailadmin/reports/workflow.html"
-    title = _("Workflows")
+    results_template_name = "wagtailadmin/reports/workflow_results.html"
+    page_title = _("Workflows")
     header_icon = "tasks"
     filterset_class = WorkflowReportFilterSet
+    index_url_name = "wagtailadmin_reports:workflow"
+    index_results_url_name = "wagtailadmin_reports:workflow_results"
+    permission_policy = page_permission_policy
+    any_permission_required = ["add", "change", "publish"]
 
     export_headings = {
         "content_object.pk": _("Page/Snippet ID"),
@@ -170,6 +177,16 @@ class WorkflowView(ReportView):
             self.FORMAT_XLSX: get_content_type_label,
         }
 
+    @cached_property
+    def header_buttons(self):
+        return [
+            HeaderButton(
+                gettext("By task"),
+                reverse("wagtailadmin_reports:workflow_tasks"),
+                icon_name="thumbtack",
+            )
+        ]
+
     def get_title(self, content_object):
         return get_latest_str(content_object)
 
@@ -198,19 +215,16 @@ class WorkflowView(ReportView):
     def decorate_paginated_queryset(self, object_list):
         return [obj for obj in object_list if obj.content_object]
 
-    def dispatch(self, request, *args, **kwargs):
-        if not page_permission_policy.user_has_any_permission(
-            request.user, ["add", "change", "publish"]
-        ):
-            raise PermissionDenied
-        return super().dispatch(request, *args, **kwargs)
-
 
 class WorkflowTasksView(ReportView):
-    template_name = "wagtailadmin/reports/workflow_tasks.html"
-    title = _("Workflow tasks")
+    results_template_name = "wagtailadmin/reports/workflow_tasks_results.html"
+    page_title = _("Workflow tasks")
     header_icon = "thumbtack"
     filterset_class = WorkflowTasksReportFilterSet
+    index_url_name = "wagtailadmin_reports:workflow_tasks"
+    index_results_url_name = "wagtailadmin_reports:workflow_tasks_results"
+    permission_policy = page_permission_policy
+    any_permission_required = ["add", "change", "publish"]
 
     export_headings = {
         "workflow_state.content_object.pk": _("Page/Snippet ID"),
@@ -244,6 +258,16 @@ class WorkflowTasksView(ReportView):
             self.FORMAT_XLSX: get_content_type_label,
         }
 
+    @cached_property
+    def header_buttons(self):
+        return [
+            HeaderButton(
+                gettext("By workflow"),
+                reverse("wagtailadmin_reports:workflow"),
+                icon_name="tasks",
+            )
+        ]
+
     def get_title(self, content_object):
         return get_latest_str(content_object)
 

wagtail/admin/viewsets/base.py

@@ -17,6 +17,10 @@ class ViewSet(WagtailMenuRegisterable):
     For more information on how to use this class, see :ref:`using_base_viewset`.
     """
 
+    #: A special value that, when passed in a kwargs dict to construct a view, indicates that
+    #: the attribute should not be written and should instead be left as the view's initial value
+    UNDEFINED = object()
+
     #: A name for this viewset, used as the default URL prefix and namespace.
     name = None
 
@@ -42,12 +46,13 @@ class ViewSet(WagtailMenuRegisterable):
         in addition to any kwargs passed to this method. Items from get_common_view_kwargs will be
         filtered to only include those that are valid for the given view_class.
         """
+        merged_kwargs = self.get_common_view_kwargs()
+        merged_kwargs.update(kwargs)
         filtered_kwargs = {
             key: value
-            for key, value in self.get_common_view_kwargs().items()
-            if hasattr(view_class, key)
+            for key, value in merged_kwargs.items()
+            if hasattr(view_class, key) and value is not self.UNDEFINED
         }
-        filtered_kwargs.update(kwargs)
         return view_class.as_view(**filtered_kwargs)
 
     def inject_view_methods(self, view_class, method_names):

wagtail/admin/viewsets/chooser.py

@@ -29,7 +29,7 @@ class ChooserViewSet(ViewSet):
     )  #: Label for the 'choose' button in the chooser widget, when an item has already been chosen
     edit_item_text = _("Edit")  #: Label for the 'edit' button in the chooser widget
 
-    per_page = 10  #: Number of results to show per page
+    per_page = ViewSet.UNDEFINED  #: Number of results to show per page
 
     #: A list of URL query parameters that should be passed on unmodified as part of any links or
     #: form submissions within the chooser modal workflow.

wagtail/admin/viewsets/model.py

@@ -1,11 +1,15 @@
 from warnings import warn
 
+from django.contrib.auth import get_permission_codename
+from django.contrib.auth.models import Permission
+from django.contrib.contenttypes.models import ContentType
 from django.core.exceptions import ImproperlyConfigured
 from django.forms.models import modelform_factory
 from django.shortcuts import redirect
 from django.urls import path
 from django.utils.functional import cached_property
 
+from wagtail import hooks
 from wagtail.admin.admin_url_finder import (
     ModelAdminURLFinder,
     register_admin_url_finder,
@@ -518,7 +522,7 @@ class ModelViewSet(ViewSet):
 
         def is_shown(_self, request):
             return self.permission_policy.user_has_any_permission(
-                request.user, ("add", "change", "delete")
+                request.user, self.index_view_class.any_permission_required
             )
 
         return type(
@@ -616,6 +620,26 @@ class ModelViewSet(ViewSet):
         if self.add_to_reference_index:
             ReferenceIndex.register_model(self.model)
 
+    def get_permissions_to_register(self):
+        """
+        Returns a queryset of :class:`~django.contrib.auth.models.Permission`
+        objects to be registered with the :ref:`register_permissions` hook. By
+        default, it returns all permissions for the model if
+        :attr:`inspect_view_enabled` is set to ``True``. Otherwise, the "view"
+        permission is excluded.
+        """
+        content_type = ContentType.objects.get_for_model(self.model)
+        permissions = Permission.objects.filter(content_type=content_type)
+        # Only register the "view" permission if the inspect view is enabled
+        if not self.inspect_view_enabled:
+            permissions = permissions.exclude(
+                codename=get_permission_codename("view", self.model_opts)
+            )
+        return permissions
+
+    def register_permissions(self):
+        hooks.register("register_permissions", self.get_permissions_to_register)
+
     def get_urlpatterns(self):
         urlpatterns = [
             path("", self.index_view, name="index"),
@@ -657,6 +681,7 @@ class ModelViewSet(ViewSet):
         super().on_register()
         self.register_admin_url_finder()
         self.register_reference_index()
+        self.register_permissions()
 
 
 class ModelViewSetGroup(ViewSetGroup):

wagtail/admin/wagtail_hooks.py

@@ -64,6 +64,7 @@ from wagtail.templatetags.wagtailcore_tags import (
     wagtail_feature_release_editor_guide_link,
     wagtail_feature_release_whats_new_link,
 )
+from wagtail.utils.version import get_main_version
 from wagtail.whitelist import allow_without_attributes, attribute_rule, check_url
 
 
@@ -975,7 +976,7 @@ def register_reports_menu():
 
 @hooks.register("register_help_menu_item")
 def register_whats_new_in_wagtail_version_menu_item():
-    version = "6.1"
+    version = get_main_version(include_patch=False)
     return DismissibleMenuItem(
         _("What's new in Wagtail %(version)s") % {"version": version},
         wagtail_feature_release_whats_new_link(),