Mark some missing unsafe attributes

diff --git a/postgresqleu/confreg/models.py b/postgresqleu/confreg/models.py
index 7216cb70c2e3d69d713efca2459d609538648bc6..860449afb649f833d6bb3c392fd7ff4ae6939ed3 100644 (file)
--- a/postgresqleu/confreg/models.py
+++ b/postgresqleu/confreg/models.py
@@ -960,6 +960,8 @@ class Room(models.Model):
 
     json_included_attributes = ['roomname', 'capacity', 'sortkey']
 
+    _unsafe_attributes = ['comment', ]
+
     def __str__(self):
         return self.roomname
 
@@ -1148,6 +1150,11 @@ class ConferenceSession(models.Model):
     # has given any feedback on this session.
     has_given_feedback = False
 
+    _unsafe_attributes = [
+        'submissionnote', 'internalnote',
+        'tentativescheduleslot_id', 'tentativescheduleslot', 'tentativeroom', 'tentativeroom_id',
+    ]
+
     @property
     def speaker_list(self):
         if self.id:

diff --git a/postgresqleu/confsponsor/models.py b/postgresqleu/confsponsor/models.py
index 78db268c3fbe9645efb3b42d1b7529a73dadcbcc..823cc61639d73ab429deb4da64cc9bd99a461380 100644 (file)
--- a/postgresqleu/confsponsor/models.py
+++ b/postgresqleu/confsponsor/models.py
@@ -30,6 +30,8 @@ class SponsorshipContract(models.Model):
     contractpdf = PdfBinaryField(null=False, blank=False, max_length=1000000, verbose_name='Contract PDF')
     fieldjson = models.JSONField(blank=False, null=False, default=dict, encoder=DjangoJSONEncoder)
 
+    _safe_attributes = ['conference', 'contractname']
+
     def __str__(self):
         return self.contractname