id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
7212	save_base() alters data, and can be called from templates	Marty Alchin	Marty Alchin	In [7221], `save()` was changed to just be a call to `save_base()`, making subclassing easier, but the `alters_data` attribute never made it onto `save_base()`. Since `save_base()` can (and usually is) called without arguments, this means that templates that receive an object can use `{{ obj.save_base }}` and commit to the database, when that shouldn't be allowed.		closed	Database layer (models, ORM)	dev		fixed			Unreviewed	1	0	0	0	0	0