moo.core.tests.test_security_queryset.test_m2m_parents_add_blocked

moo.core.tests.test_security_queryset.test_m2m_parents_add_blocked(t_init, t_wizard)

ManyToManyField.add() issues SQL directly without going through Object.save(), bypassing ACL checks. The guard blocks ‘add’ on BaseManager instances.