id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
30028	Uneditable object still editable through change_list if list_editable not empty	ksl	nobody	"= Abstract
This bug allows an object that should be uneditable (its `has_change_permission` method always returns `False`) to be edited through an editable changelist.

= Steps to reproduce
- Use the following admin:

{{{
class ArticleAdmin(models.ModelAdmin):
	list_display = (""title"", ""author"", ""abstract"")
	list_editable = (""title"", ""author"")

	def has_change_permission(self, request, obj=None):
		return False
}}}

- Navigate to the article changelist.
- Change any title/author field and save.

= Result
The modified article objects are indeed modified and saved to database.

= Expected result
The changelist view should (as does change form) display read-only fields (ie: `span`s, not `input`s), and disallow any modification to be saved to database.

= Technical information
Tested on Django 2.1.4."	Bug	closed	contrib.admin	2.1	Normal	duplicate	changelist		Unreviewed	0	0	0	0	0	0