wagtail 7.2.1__py3-none-any.whl → 7.3rc1__py3-none-any.whl

wagtail/tests/test_page_model.py

@@ -8,7 +8,7 @@ from django.conf import settings
 from django.contrib.auth import get_user_model
 from django.contrib.auth.models import AnonymousUser, Group
 from django.contrib.contenttypes.models import ContentType
-from django.core.exceptions import ValidationError
+from django.core.exceptions import PermissionDenied, ValidationError
 from django.http import Http404
 from django.test import Client, TestCase, override_settings
 from django.test.client import RequestFactory
@@ -1013,6 +1013,141 @@ class TestSaveRevision(TestCase):
                 approved_go_live_at=timezone.now() + datetime.timedelta(days=1)
             )
 
+    def test_overwrite_revision(self):
+        christmas_event = EventPage.objects.get(url_path="/home/events/christmas/")
+        christmas_event.title = "A partridge in a pear tree"
+        revision1 = christmas_event.save_revision()
+        self.assertEqual(christmas_event.revisions.count(), 1)
+        christmas_event.title = "Two turtle doves"
+        revision2 = christmas_event.save_revision(overwrite_revision=revision1)
+        self.assertEqual(christmas_event.revisions.count(), 1)
+        self.assertEqual(revision1.id, revision2.id)
+        revision1.refresh_from_db()
+        self.assertEqual(revision1.content["title"], "Two turtle doves")
+
+    def test_cannot_overwrite_revision_that_is_not_latest(self):
+        christmas_event = EventPage.objects.get(url_path="/home/events/christmas/")
+        christmas_event.title = "A partridge in a pear tree"
+        revision1 = christmas_event.save_revision()
+        self.assertEqual(christmas_event.revisions.count(), 1)
+        christmas_event.title = "Two turtle doves"
+        christmas_event.save_revision()
+        self.assertEqual(christmas_event.revisions.count(), 2)
+        christmas_event.title = "Three French hens"
+        with self.assertRaisesMessage(
+            PermissionDenied,
+            "Cannot overwrite a revision that is not the latest for this page.",
+        ):
+            christmas_event.save_revision(overwrite_revision=revision1)
+        self.assertEqual(christmas_event.revisions.count(), 2)
+        latest_revision = christmas_event.get_latest_revision()
+        self.assertEqual(latest_revision.content["title"], "Two turtle doves")
+
+    def test_cannot_overwrite_revision_from_other_instance(self):
+        christmas_event = EventPage.objects.get(url_path="/home/events/christmas/")
+        christmas_event.title = "A partridge in a pear tree"
+        christmas_event.save_revision()
+        self.assertEqual(christmas_event.revisions.count(), 1)
+
+        other_event = EventPage.objects.get(
+            url_path="/home/events/tentative-unpublished-event/"
+        )
+        other_event.title = "The final event"
+        revision2 = other_event.save_revision()
+        self.assertEqual(other_event.revisions.count(), 1)
+
+        christmas_event.title = "Two turtle doves"
+        with self.assertRaisesMessage(
+            PermissionDenied,
+            "Cannot overwrite a revision that is not the latest for this page.",
+        ):
+            christmas_event.save_revision(overwrite_revision=revision2)
+
+        self.assertEqual(christmas_event.revisions.count(), 1)
+        latest_revision = christmas_event.get_latest_revision()
+        self.assertEqual(latest_revision.content["title"], "A partridge in a pear tree")
+
+        self.assertEqual(other_event.revisions.count(), 1)
+        latest_revision = other_event.get_latest_revision()
+        self.assertEqual(latest_revision.content["title"], "The final event")
+
+    def test_overwrite_revision_with_user_id(self):
+        event_moderator = get_user_model().objects.get(
+            email="eventmoderator@example.com"
+        )
+        christmas_event = EventPage.objects.get(url_path="/home/events/christmas/")
+        christmas_event.title = "A partridge in a pear tree"
+        revision1 = christmas_event.save_revision(user=event_moderator)
+        self.assertEqual(christmas_event.revisions.count(), 1)
+        christmas_event.title = "Two turtle doves"
+        revision2 = christmas_event.save_revision(
+            user=event_moderator, overwrite_revision=revision1
+        )
+        self.assertEqual(christmas_event.revisions.count(), 1)
+        self.assertEqual(revision1.id, revision2.id)
+        revision1.refresh_from_db()
+        self.assertEqual(revision1.content["title"], "Two turtle doves")
+
+    def test_cannot_overwrite_revision_with_wrong_user_id(self):
+        event_moderator = get_user_model().objects.get(
+            email="eventmoderator@example.com"
+        )
+        event_editor = get_user_model().objects.get(email="eventeditor@example.com")
+
+        christmas_event = EventPage.objects.get(url_path="/home/events/christmas/")
+        christmas_event.title = "A partridge in a pear tree"
+        revision1 = christmas_event.save_revision(user=event_editor)
+        self.assertEqual(christmas_event.revisions.count(), 1)
+        christmas_event.title = "Two turtle doves"
+        with self.assertRaisesMessage(
+            PermissionDenied,
+            "Cannot overwrite a revision that was not created by the current user.",
+        ):
+            christmas_event.save_revision(
+                user=event_moderator, overwrite_revision=revision1
+            )
+        self.assertEqual(christmas_event.revisions.count(), 1)
+        revision1.refresh_from_db()
+        self.assertEqual(revision1.content["title"], "A partridge in a pear tree")
+
+    def test_cannot_overwrite_revision_with_omitted_user_id(self):
+        event_editor = get_user_model().objects.get(email="eventeditor@example.com")
+
+        christmas_event = EventPage.objects.get(url_path="/home/events/christmas/")
+        christmas_event.title = "A partridge in a pear tree"
+        revision1 = christmas_event.save_revision(user=event_editor)
+        self.assertEqual(christmas_event.revisions.count(), 1)
+        christmas_event.title = "Two turtle doves"
+        with self.assertRaisesMessage(
+            PermissionDenied,
+            "Cannot overwrite a revision that was not created by the current user.",
+        ):
+            christmas_event.save_revision(overwrite_revision=revision1)
+        self.assertEqual(christmas_event.revisions.count(), 1)
+        revision1.refresh_from_db()
+        self.assertEqual(revision1.content["title"], "A partridge in a pear tree")
+
+    def test_cannot_overwrite_anonymous_revision_with_user_id(self):
+        event_moderator = get_user_model().objects.get(
+            email="eventmoderator@example.com"
+        )
+
+        christmas_event = EventPage.objects.get(url_path="/home/events/christmas/")
+        christmas_event.title = "A partridge in a pear tree"
+        revision1 = christmas_event.save_revision()
+        self.assertEqual(christmas_event.revisions.count(), 1)
+        christmas_event.title = "Two turtle doves"
+        with self.assertRaisesMessage(
+            PermissionDenied,
+            "Cannot overwrite a revision that was not created by the current user.",
+        ):
+            christmas_event.save_revision(
+                user=event_moderator, overwrite_revision=revision1
+            )
+        self.assertEqual(christmas_event.revisions.count(), 1)
+        revision1.refresh_from_db()
+        self.assertEqual(revision1.content["title"], "A partridge in a pear tree")
+
 
 class TestLiveRevision(TestCase):
     fixtures = ["test.json"]
@@ -4147,3 +4282,57 @@ class TestPageServeWithPasswordRestriction(TestCase, WagtailTestUtils):
 
         self.assertFalse("Cache-Control" in response)
         self.assertFalse("Expires" in response)
+
+
+class TestPageNaturalKey(TestCase):
+    def setUp(self):
+        self.home_page = Page.objects.get(slug="home")
+
+    def test_page_natural_key(self):
+        natural_key = self.home_page.natural_key()
+        self.assertEqual(natural_key, ("/home/",))
+
+        retrieved_page = Page.objects.get_by_natural_key("/home/")
+        self.assertEqual(retrieved_page, self.home_page)
+
+
+class TestPageCreationWithoutPromotePanels(WagtailTestUtils, TestCase):
+    def setUp(self):
+        self.user = self.login()
+        self.root_page = Page.objects.get(url_path="/home/")
+
+    def _submit_page_form(self, model_name, title):
+        url = reverse(
+            "wagtailadmin_pages:add", args=("tests", model_name, self.root_page.id)
+        )
+
+        get_response = self.client.get(url)
+        self.assertEqual(get_response.status_code, 200)
+
+        form = get_response.context["form"]
+        post_data = form.data.copy()
+
+        for key, value in list(post_data.items()):
+            if value is None:
+                post_data[key] = ""
+
+        post_data.update(
+            {
+                "title": title,
+                "action-save": "Save draft",
+            }
+        )
+
+        post_response = self.client.post(url, post_data)
+        return post_response
+
+    def test_create_simple_page_with_auto_slug(self):
+        response_1 = self._submit_page_form("nopromotepage", "New York")
+        self.assertEqual(response_1.status_code, 302)
+        self.assertTrue(Page.objects.filter(title="New York", slug="new-york").exists())
+
+        response_2 = self._submit_page_form("nopromotepage", "New York")
+        self.assertEqual(response_2.status_code, 302)
+        self.assertTrue(
+            Page.objects.filter(title="New York", slug="new-york-2").exists()
+        )

wagtail/tests/test_page_privacy.py

@@ -28,6 +28,11 @@ class TestPagePrivacy(WagtailTestUtils, TestCase):
             response.templates[0].name, "wagtailcore/password_required.html"
         )
 
+        # test that preview attributes are set on the request
+        request = response.context["request"]
+        self.assertFalse(request.is_preview)
+        self.assertIsNone(request.preview_mode)
+
         submit_url = "/_util/authenticate_with_password/%d/%d/" % (
             self.view_restriction.id,
             self.secret_plans_page.id,

wagtail/tests/test_reference_index.py

@@ -878,3 +878,45 @@ class TestBulkFetch(TestCase):
             },
             expected_refs,
         )
+
+
+class TestReferenceIndex(TestCase):
+    def test_target_deletion_leaves_orphan(self):
+        """
+        Regression test for #13632:
+        Deleting the TARGET (referenced) object should remove the inbound link from ReferenceIndex.
+        """
+        root_page = Page.objects.get(id=2)
+        target_page = Page(title="Target2", slug="target2")
+        root_page.add_child(instance=target_page)
+        source_page = Page(title="Source2", slug="source2")
+        root_page.add_child(instance=source_page)
+
+        ReferenceIndex.objects.create(
+            base_content_type=ReferenceIndex._get_base_content_type(source_page),
+            content_type=ContentType.objects.get_for_model(source_page),
+            object_id=source_page.pk,
+            to_content_type=ReferenceIndex._get_base_content_type(target_page),
+            to_object_id=target_page.pk,
+            model_path="body",
+            content_path="body.0.value",
+            content_path_hash=ReferenceIndex._get_content_path_hash("body.0.value"),
+        )
+
+        # Verify ref exists
+        self.assertEqual(ReferenceIndex.get_references_to(target_page).count(), 1)
+
+        # Delete TARGET
+        target_page.delete()
+
+        # Check if reference remains (pointing to dead target)
+        refs = ReferenceIndex.objects.filter(
+            to_object_id=target_page.pk,
+            to_content_type=ReferenceIndex._get_base_content_type(target_page),
+        )
+
+        self.assertEqual(
+            refs.count(),
+            0,
+            "ReferenceIndex should be cleared of inbound references when target is deleted",
+        )

wagtail/tests/test_revision_model.py

@@ -1,6 +1,7 @@
 import datetime
 
 from django.contrib.contenttypes.models import ContentType
+from django.core.exceptions import PermissionDenied
 from django.test import TestCase
 from freezegun import freeze_time
 
@@ -12,9 +13,10 @@ from wagtail.test.testapp.models import (
     RevisableModel,
     SimplePage,
 )
+from wagtail.test.utils import WagtailTestUtils
 
 
-class TestRevisableModel(TestCase):
+class TestRevisableModel(WagtailTestUtils, TestCase):
     @classmethod
     def setUpTestData(cls):
         cls.instance = RevisableModel.objects.create(text="foo")
@@ -237,3 +239,118 @@ class TestRevisableModel(TestCase):
                 self.assertEqual(Revision.objects.filter(**query).first(), revision)
                 instance.delete()
                 self.assertIs(Revision.objects.filter(**query).exists(), False)
+
+    def test_overwrite_revision(self):
+        self.instance.text = "Existing revision"
+        revision1 = self.instance.save_revision()
+        self.assertEqual(self.instance.revisions.count(), 1)
+        self.instance.text = "Updated revision"
+        revision2 = self.instance.save_revision(overwrite_revision=revision1)
+        self.assertEqual(self.instance.revisions.count(), 1)
+        self.assertEqual(revision1.id, revision2.id)
+        revision1.refresh_from_db()
+        self.assertEqual(revision1.content["text"], "Updated revision")
+
+    def test_cannot_overwrite_revision_that_is_not_latest(self):
+        self.instance.text = "Existing revision"
+        revision1 = self.instance.save_revision()
+        self.assertEqual(self.instance.revisions.count(), 1)
+        self.instance.text = "Second revision"
+        self.instance.save_revision()
+        self.assertEqual(self.instance.revisions.count(), 2)
+        self.instance.text = "Updated revision"
+        with self.assertRaisesMessage(
+            PermissionDenied,
+            "Cannot overwrite a revision that is not the latest for this "
+            "revisable model.",
+        ):
+            self.instance.save_revision(overwrite_revision=revision1)
+
+        self.assertEqual(self.instance.revisions.count(), 2)
+        latest_revision = self.instance.get_latest_revision()
+        self.assertEqual(latest_revision.content["text"], "Second revision")
+
+    def test_cannot_overwrite_revision_from_other_instance(self):
+        self.instance.text = "Existing revision"
+        self.instance.save_revision()
+
+        other_instance = RevisableModel.objects.create(text="other")
+        other_instance.text = "Existing other revision"
+        revision1 = other_instance.save_revision()
+
+        self.instance.text = "Updated revision"
+        with self.assertRaisesMessage(
+            PermissionDenied,
+            "Cannot overwrite a revision that is not the latest for this "
+            "revisable model.",
+        ):
+            self.instance.save_revision(overwrite_revision=revision1)
+
+        self.assertEqual(self.instance.revisions.count(), 1)
+        latest_revision = self.instance.get_latest_revision()
+        self.assertEqual(latest_revision.content["text"], "Existing revision")
+
+        self.assertEqual(other_instance.revisions.count(), 1)
+        latest_revision = other_instance.get_latest_revision()
+        self.assertEqual(latest_revision.content["text"], "Existing other revision")
+
+    def test_overwrite_revision_with_user_id(self):
+        user = self.create_user("user1")
+        self.instance.text = "Existing revision"
+        revision1 = self.instance.save_revision(user=user)
+        self.assertEqual(self.instance.revisions.count(), 1)
+        self.instance.text = "Updated revision"
+        revision2 = self.instance.save_revision(overwrite_revision=revision1, user=user)
+        self.assertEqual(self.instance.revisions.count(), 1)
+        self.assertEqual(revision1.id, revision2.id)
+        revision1.refresh_from_db()
+        self.assertEqual(revision1.content["text"], "Updated revision")
+
+    def test_cannot_overwrite_revision_with_wrong_user_id(self):
+        user1 = self.create_user("user1")
+        user2 = self.create_user("user2")
+        self.instance.text = "Existing revision"
+        revision1 = self.instance.save_revision(user=user1)
+        self.assertEqual(self.instance.revisions.count(), 1)
+        self.instance.text = "Updated revision"
+        with self.assertRaisesMessage(
+            PermissionDenied,
+            "Cannot overwrite a revision that was not created by the current user.",
+        ):
+            self.instance.save_revision(overwrite_revision=revision1, user=user2)
+
+        self.assertEqual(self.instance.revisions.count(), 1)
+        latest_revision = self.instance.get_latest_revision()
+        self.assertEqual(latest_revision.content["text"], "Existing revision")
+
+    def test_cannot_overwrite_revision_with_omitted_user_id(self):
+        user1 = self.create_user("user1")
+        self.instance.text = "Existing revision"
+        revision1 = self.instance.save_revision(user=user1)
+        self.assertEqual(self.instance.revisions.count(), 1)
+        self.instance.text = "Updated revision"
+        with self.assertRaisesMessage(
+            PermissionDenied,
+            "Cannot overwrite a revision that was not created by the current user.",
+        ):
+            self.instance.save_revision(overwrite_revision=revision1)
+
+        self.assertEqual(self.instance.revisions.count(), 1)
+        latest_revision = self.instance.get_latest_revision()
+        self.assertEqual(latest_revision.content["text"], "Existing revision")
+
+    def test_cannot_overwrite_anonymous_revision_with_user_id(self):
+        user1 = self.create_user("user1")
+        self.instance.text = "Existing revision"
+        revision1 = self.instance.save_revision()
+        self.assertEqual(self.instance.revisions.count(), 1)
+        self.instance.text = "Updated revision"
+        with self.assertRaisesMessage(
+            PermissionDenied,
+            "Cannot overwrite a revision that was not created by the current user.",
+        ):
+            self.instance.save_revision(overwrite_revision=revision1, user=user1)
+
+        self.assertEqual(self.instance.revisions.count(), 1)
+        latest_revision = self.instance.get_latest_revision()
+        self.assertEqual(latest_revision.content["text"], "Existing revision")

wagtail/tests/test_utils.py

@@ -185,14 +185,14 @@ class TestInvokeViaAttributeShortcut(SimpleTestCase):
             raise AssertionError(
                 "An error occurred when attempting to pickle %r: %s"
                 % (self.test_object, e)
-            )
+            ) from e
         try:
             self.test_object = pickle.loads(pickled)
         except Exception as e:  # noqa: BLE001
             raise AssertionError(
                 "An error occurred when attempting to unpickle %r: %s"
                 % (self.test_object, e)
-            )
+            ) from e
 
         # Confirm unpickled object works the same
         self.target_object = self.test_object.obj

wagtail/users/locale/en/LC_MESSAGES/django.po

@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-10-23 16:45+0100\n"
+"POT-Creation-Date: 2026-01-21 18:00+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -296,7 +296,7 @@ msgid ""
 "users."
 msgstr ""
 
-#: templates/wagtailusers/groups/confirm_delete.html:18 views/groups.py:139
+#: templates/wagtailusers/groups/confirm_delete.html:18 views/groups.py:153
 msgid "Are you sure you want to delete this group?"
 msgstr ""
 
@@ -307,7 +307,7 @@ msgstr ""
 
 #: templates/wagtailusers/groups/includes/formatted_permissions.html:20
 #: templates/wagtailusers/groups/includes/formatted_permissions.html:107
-#: views/groups.py:88 views/users.py:125
+#: views/groups.py:102 views/users.py:125
 msgid "Name"
 msgstr ""
 
@@ -403,7 +403,7 @@ msgstr ""
 msgid "Can view"
 msgstr ""
 
-#: utils.py:85
+#: utils.py:88
 #, python-format
 msgid "user %(id)s (deleted)"
 msgstr ""
@@ -461,46 +461,46 @@ msgid_plural "%(num_parent_objects)d users have been marked as inactive"
 msgstr[0] ""
 msgstr[1] ""
 
-#: views/groups.py:78 views/groups.py:148
+#: views/groups.py:92 views/groups.py:162
 msgid "Groups"
 msgstr ""
 
-#: views/groups.py:79
+#: views/groups.py:93
 msgid "Add a group"
 msgstr ""
 
-#: views/groups.py:80
+#: views/groups.py:94
 msgid "Search groups"
 msgstr ""
 
-#: views/groups.py:96
+#: views/groups.py:110
 msgid "Add group"
 msgstr ""
 
-#: views/groups.py:97
+#: views/groups.py:111
 #, python-format
 msgid "Group '%(object)s' created."
 msgstr ""
 
-#: views/groups.py:110
+#: views/groups.py:124
 #, python-format
 msgid "Group '%(object)s' updated."
 msgstr ""
 
-#: views/groups.py:111
+#: views/groups.py:125
 msgid "The group could not be saved due to errors."
 msgstr ""
 
-#: views/groups.py:118
+#: views/groups.py:132
 msgid "View users in this group"
 msgstr ""
 
-#: views/groups.py:137
+#: views/groups.py:151
 #, python-format
 msgid "Group '%(object)s' deleted."
 msgstr ""
 
-#: views/groups.py:138
+#: views/groups.py:152
 msgid "Delete group"
 msgstr ""
 

wagtail/users/locale/id_ID/LC_MESSAGES/django.po

@@ -4,6 +4,7 @@
 #
 # Translators:
 # atmosuwiryo <suwiryo.atmo@gmail.com>, 2019
+# Imanu Wardi, 2025
 # M. Febrian Ramadhana <febrian@ramadhana.me>, 2018
 # atmosuwiryo <suwiryo.atmo@gmail.com>, 2019
 msgid ""
@@ -12,7 +13,7 @@ msgstr ""
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2025-10-23 16:45+0100\n"
 "PO-Revision-Date: 2014-02-19 11:54+0000\n"
-"Last-Translator: atmosuwiryo <suwiryo.atmo@gmail.com>, 2019\n"
+"Last-Translator: Imanu Wardi, 2025\n"
 "Language-Team: Indonesian (Indonesia) (http://app.transifex.com/torchbox/"
 "wagtail/language/id_ID/)\n"
 "MIME-Version: 1.0\n"
@@ -22,7 +23,10 @@ msgstr ""
 "Plural-Forms: nplurals=1; plural=0;\n"
 
 msgid "Wagtail users"
-msgstr "Wagtail pengguna"
+msgstr "Pengguna Wagtail"
+
+msgid "Required. Letters, digits and @/./+/-/_ only."
+msgstr "Harus diisi. Gunakan hanya huruf, angka, dan simbol @/./+/-/."
 
 msgid "This value may contain only letters, numbers and @/./+/-/_ characters."
 msgstr "Hanya dapat berisi karakter huruf, angka dan @/./+/-/_ saja."

wagtail/users/locale/it/LC_MESSAGES/django.po

@@ -6,7 +6,7 @@
 # Giacomo Ghizzani <giacomo.ghz@gmail.com>, 2015-2018
 # giammi <gian-maria.daffre@giammi.org>, 2018
 # giammi <gian-maria.daffre@giammi.org>, 2018
-# Marco Badan <marco.badan@gmail.com>, 2021-2024
+# Marco Badan <marco.badan@gmail.com>, 2021-2026
 # Sandro Badalamenti <sandro@mailinator.com>, 2019
 msgid ""
 msgstr ""
@@ -14,7 +14,7 @@ msgstr ""
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2025-10-23 16:45+0100\n"
 "PO-Revision-Date: 2014-02-19 11:54+0000\n"
-"Last-Translator: Sandro Badalamenti <sandro@mailinator.com>, 2019\n"
+"Last-Translator: Marco Badan <marco.badan@gmail.com>, 2021-2026\n"
 "Language-Team: Italian (http://app.transifex.com/torchbox/wagtail/language/"
 "it/)\n"
 "MIME-Version: 1.0\n"
@@ -129,6 +129,12 @@ msgstr "Scuro"
 msgid "admin theme"
 msgstr "tema admin"
 
+msgid "More contrast"
+msgstr "Più contrasto"
+
+msgid "contrast"
+msgstr "contrasto"
+
 msgid "Default"
 msgstr "Default"
 
@@ -143,6 +149,9 @@ msgstr "densità"
 msgid "Keyboard shortcuts"
 msgstr "Scorciatoie da tastiera"
 
+msgid "Enable custom keyboard shortcuts specific to Wagtail."
+msgstr "Abilita le scorciatoie da tastiera personalizzate per Wagtail."
+
 msgid "user profile"
 msgstr "profilo utente"
 
@@ -317,6 +326,9 @@ msgstr ""
 "Non ci sono utenti configurati. Perché non <a "
 "href=\"%(wagtailusers_add_url)s\">ne aggiungi qualcuno</a>?"
 
+msgid "Can view"
+msgstr "Può vedere"
+
 #, python-format
 msgid "user %(id)s (deleted)"
 msgstr "utente %(id)s (eliminato)"