diff -r 211472ab15c8 -r a8c1ea390400 cubicweb/server/session.py
--- a/cubicweb/server/session.py	Thu Mar 14 14:45:35 2019 +0100
+++ b/cubicweb/server/session.py	Thu Mar 14 12:08:37 2019 +0100
@@ -28,7 +28,6 @@
 
 from six import text_type
 
-from logilab.common.deprecation import deprecated
 from logilab.common.registry import objectify_predicate
 
 from cubicweb import QueryError, ProgrammingError, schema, server
@@ -73,15 +72,6 @@
     return req.vreg.config.repairing
 
 
-@deprecated('[3.17] use <object>.allow/deny_all_hooks_but instead')
-def hooks_control(obj, mode, *categories):
-    assert mode in (HOOKS_ALLOW_ALL, HOOKS_DENY_ALL)
-    if mode == HOOKS_ALLOW_ALL:
-        return obj.allow_all_hooks_but(*categories)
-    elif mode == HOOKS_DENY_ALL:
-        return obj.deny_all_hooks_but(*categories)
-
-
 class _hooks_control(object):
     """context manager to control activated hooks categories.
 
@@ -123,11 +113,6 @@
         self.cnx._hooks_categories = self.old_categories
 
 
-@deprecated('[3.17] use <object>.security_enabled instead')
-def security_enabled(obj, *args, **kwargs):
-    return obj.security_enabled(*args, **kwargs)
-
-
 class _security_enabled(object):
     """context manager to control security w/ session.execute,
 
@@ -390,11 +375,6 @@
     # shared data handling ###################################################
 
     @property
-    @deprecated('[3.25] use transaction_data or req.session.data', stacklevel=3)
-    def data(self):
-        return self.transaction_data
-
-    @property
     def rql_rewriter(self):
         return self._rewriter
 
@@ -409,24 +389,6 @@
         self.local_perm_cache.clear()
         self.rewriter = RQLRewriter(self)
 
-    @deprecated('[3.19] cnxset are automatically managed now.'
-                ' stop using explicit set and free.')
-    def set_cnxset(self):
-        pass
-
-    @deprecated('[3.19] cnxset are automatically managed now.'
-                ' stop using explicit set and free.')
-    def free_cnxset(self, ignoremode=False):
-        pass
-
-    @property
-    @contextmanager
-    @_open_only
-    @deprecated('[3.21] a cnxset is automatically set on __enter__ call now.'
-                ' stop using .ensure_cnx_set')
-    def ensure_cnx_set(self):
-        yield
-
     # Entity cache management #################################################
     #
     # The connection entity cache as held in cnx.transaction_data is removed at the
@@ -702,12 +664,6 @@
         """Return entity type for the entity with id `eid`."""
         return self.repo.type_from_eid(eid, self)
 
-    @deprecated('[3.24] use entity_type(eid) instead')
-    @_open_only
-    def entity_metas(self, eid):
-        """Return a dictionary {type}) for the entity with id `eid`."""
-        return {'type': self.repo.type_from_eid(eid, self)}
-
     # core method #############################################################
 
     @_open_only