Doc update to account for runserver behavior when starting project

[Patrick Beeson]

In 1.7, running runserver before running migrate when creating a new project creates a db file (sqlite by default). This isn't clear in the tutorial docs, and is different behavior than what occurred in previous versions. You'll also get a nasty server error when viewing localhost in your browser.

I propose updating the first tutorial page to account for this to avoid confusing folks new to Django, or new to 1.7 from a previous version.

[Tim Graham]

As discussed in #django-sprint, a mention in the release notes would be fine. Suggested text: "With the addition of the SessionAuthenticationMiddleware to the default project template, a database must be created before accessing a page using runserver."

[Patrick Beeson]

I'd be happy to assign this ticket to myself, using the suggested text.

[Patrick Beeson]

Where do you recommend adding this in the release notes?

[Patrick Beeson]

This update looks most appropriate under miscellaneous (​https://docs.djangoproject.com/en/1.7/releases/1.7/#miscellaneous) or management commands (​https://docs.djangoproject.com/en/1.7/releases/1.7/#management-commands), especially since the latter mentions runserver specifically.

[Tim Graham]

I'd go for the first suggestion, since the second is under "Minor Features" which this isn't.

[Collin Anderson]

If it helps, it's only an issue if you already have a sessionid cookie for the domain, so it shouldn't be an issue for everyone.

As a side note, probably not possible with just middleware, but it would be nice if the session authentication check was done the first time get_user(request) is called, instead of every request, as it creates unnecessary session and user queries on pages where user is not used. It would be nice if there were a way to override the get_user(request) logic to put this check there. That would remove the requirement to have a database before using a runserver for the first time.

An alternative could be to enable signed_cookies by default, as that would also remove the database requirement.

[Patrick Beeson]

Pull request issued for release docs update: ​https://github.com/django/django/pull/3166

[Collin Anderson]

"has patch" is the proper state, currently. you shouldn't "ready for checkin" your own patch.

[Tim Graham <timograham@…>]

In fb545e5a27369570076d0d34626f3c7e916ee2e4:

Fixed #23427 -- Documented migrate is required before runserver for default projects.

[Tim Graham <timograham@…>]

In d4ef9a4a21ecf897ebcbdc49737fdb5b210fbb98:

[1.7.x] Fixed #23427 -- Documented migrate is required before runserver for default projects.

Backport of fb545e5a27 from master