id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
16180	IGNORED_PARAMS customization	Manuel Saelices	nobody	"Several times you ""hack"" the admin interface and want to use extra GET parameters.

Look at this example:
{{{
#!python
class FooModelAdmin(admin.ModelAdmin):
     # ...
     def get_list_display(self, request, extra_context=None):
         if request.GET.has_key('hide_columns'):
             return ('pk', )
         return super(FooModelAdmin, self).get_list_display(request, extra_context)
}}}

But this is impossible because the ""hide_columns"" GET parameter is not allowed by security reasons. The allowed parameters ({{{IGNORED_PARAMS}}} global variable) is hardcoded (look at [source:django/trunk/django/contrib/admin/views/main.py#L29 this code]).

Should be good if you should configure this parameters. I don't know if a new setting should be good or maybe a {{{ChangeList.get_ignored_lookup_params()}}} method to do something like that:
{{{
#!python

class FooChangeList(ChangeList):

    def get_ignored_lookup_params(self):
         return super(FooChangeList, self).get_ignored_lookup_params() +  ['hide_columns']
}}}

Of course you can extends the {{{ChangeList}}} and override the {{{ChangeList.get_lookup_params()}}} method but should be better of using a special method for this useful thing."	New feature	closed	contrib.admin	dev	Normal	wontfix			Unreviewed	0	0	0	0	0	0