sehmaschine/django-grappelli — pull request #377 by marcgibbons (2013-10-07 20:26:41+00:00)
Title: Security update: Hide models from anonymous users (Versions 2.4.x)

Currently, viewing the page source of the admin login will reveal your entire application's database schema in a JS object.

Added a small conditional check around the MODEL_URL_ARRAY declaration that checks whether the user is authenticated and is staff.