id summary reporter owner description type status component version severity resolution keywords cc stage has_patch needs_docs needs_tests needs_better_patch easy ui_ux 7212 save_base() alters data, and can be called from templates Marty Alchin Marty Alchin In [7221], `save()` was changed to just be a call to `save_base()`, making subclassing easier, but the `alters_data` attribute never made it onto `save_base()`. Since `save_base()` can (and usually is) called without arguments, this means that templates that receive an object can use `{{ obj.save_base }}` and commit to the database, when that shouldn't be allowed. closed Database layer (models, ORM) dev fixed Unreviewed 1 0 0 0 0 0