diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index f2635b7b..5080ef32 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1,24 +1,20 @@
 services:
-    - mysql:latest
+    - postgres:latest
     - redis:latest
 
 variables:
     # GestioCOF settings
-    DJANGO_SETTINGS_MODULE: "cof.settings_dev"
-    DBNAME: "cof_gestion"
-    DBUSER: "cof_gestion"
-    DBPASSWD: "cof_password"
-    DBHOST: "mysql"
+    DJANGO_SETTINGS_MODULE: "cof.settings.prod"
+    DBHOST: "postgres"
     REDIS_HOST: "redis"
 
     # Cached packages
     PYTHONPATH: "$CI_PROJECT_DIR/vendor/python"
 
-    # mysql service configuration
-    MYSQL_DATABASE: "$DBNAME"
-    MYSQL_USER: "$DBUSER"
-    MYSQL_PASSWORD: "$DBPASSWD"
-    MYSQL_ROOT_PASSWORD: "root_password"
+    # postgres service configuration
+    POSTGRES_PASSWORD: "4KZt3nGPLVeWSvtBZPSM3fSzXpzEU4"
+    POSTGRES_USER: "cof_gestion"
+    POSTGRES_DB: "cof_gestion"
 
 
 cache:
@@ -29,13 +25,12 @@ cache:
 
 before_script:
     - mkdir -p vendor/{python,pip,apt}
-    - apt-get update -q && apt-get -o dir::cache::archives="vendor/apt" install -yqq mysql-client
-    - mysql --user=root --password="$MYSQL_ROOT_PASSWORD" --host="$DBHOST"
-        -e "GRANT ALL ON test_$DBNAME.* TO '$DBUSER'@'%'"
+    - apt-get update -q && apt-get -o dir::cache::archives="vendor/apt" install -yqq postgresql-client
+    - sed -E 's/^REDIS_HOST.*/REDIS_HOST = "redis"/' cof/settings/secret_example.py > cof/settings/secret.py
     # Remove the old test database if it has not been done yet
-    - mysql --user=root --password="$MYSQL_ROOT_PASSWORD" --host="$DBHOST"
+    - psql --username=cof_gestion --password="4KZt3nGPLVeWSvtBZPSM3fSzXpzEU4" --host="$DBHOST"
         -e "DROP DATABASE test_$DBNAME" || true
-    - pip install --cache-dir vendor/pip -t vendor/python -r requirements-devel.txt
+    - pip install --cache-dir vendor/pip -t vendor/python -r requirements.txt
 
 test:
     stage: test
diff --git a/bda/admin.py b/bda/admin.py
index 0cc66d43..60d3c1ba 100644
--- a/bda/admin.py
+++ b/bda/admin.py
@@ -56,17 +56,17 @@ class AttributionInline(admin.TabularInline):
     def get_queryset(self, request):
         qs = super().get_queryset(request)
         if self.listing is not None:
-            qs.filter(spectacle__listing=self.listing)
+            qs = qs.filter(spectacle__listing=self.listing)
         return qs
 
 
 class WithListingAttributionInline(AttributionInline):
+    exclude = ('given', )
     form = WithListingAttributionTabularAdminForm
     listing = True
 
 
 class WithoutListingAttributionInline(AttributionInline):
-    exclude = ('given', )
     form = WithoutListingAttributionTabularAdminForm
     listing = False
 
diff --git a/cof/settings/prod.py b/cof/settings/prod.py
index 286b5547..2ffdf02f 100644
--- a/cof/settings/prod.py
+++ b/cof/settings/prod.py
@@ -21,6 +21,7 @@ ALLOWED_HOSTS = [
 STATIC_ROOT = os.path.join(
     os.path.dirname(os.path.dirname(BASE_DIR)),
     "public",
+    "gestion",
     "static",
 )
 
diff --git a/kfet/forms.py b/kfet/forms.py
index 2d07581d..6ef3aefb 100644
--- a/kfet/forms.py
+++ b/kfet/forms.py
@@ -167,10 +167,22 @@ class GroupForm(forms.ModelForm):
         name = self.cleaned_data['name']
         return 'K-Fêt %s' % name
 
+    def clean_permissions(self):
+        kfet_perms = self.cleaned_data['permissions']
+        # TODO: With Django >=1.11, the QuerySet method 'difference' can be used.
+        # other_groups = self.instance.permissions.difference(
+        #     self.fields['permissions'].queryset
+        # )
+        other_perms = self.instance.permissions.exclude(
+            pk__in=[p.pk for p in self.fields['permissions'].queryset],
+        )
+        return list(kfet_perms) + list(other_perms)
+
     class Meta:
-        model  = Group
+        model = Group
         fields = ['name', 'permissions']
 
+
 class AccountNegativeForm(forms.ModelForm):
     class Meta:
         model  = AccountNegative