authenticated users and anonymous share the same caching

[shuge.lee@…]

Anonymous access some detail views, Django does save its cache,
authenticated user access the same views will get the anonymous's cache,
however, some HTML thing for authenticated user will not in response as expected.

And the CACHE_MIDDLEWARE_ANONYMOUS_ONLY setting option is not useful for this situation.

I think it is a bad idea that authenticated users and anonymous share the same caching.

[shuge.lee@…]

implement CACHE_MIDDLEWARE_DISABLE_FOR_AUTHENTICATED option for caching

[Carl Meyer]

Hi, thanks for the report. I don't believe the report is correct, though. Any access of request.user will trigger an access of the session, which in turn will trigger Vary: Cookie on the response. The cache middleware respects Vary: Cookie, and so differing session cookies will prevent one authenticated user from seeing a response from another authenticated user, or from an anonymous user.

If you're actually experiencing authenticated users getting served cached responses for anonymous users, then something in your project is causing the Vary: Cookie stuff to not work correctly, and that's where we need more information.

Closing this worksforme, but feel free to reopen if you can provide enough detail to allow us to reproduce the problem you're experiencing.