Changeset 3736

Timestamp:

09/08/06 00:38:38 (2 years ago)

Author:

adrian

Message:

Added staff_member_required and permission check to django.contrib.admin.views.auth.user_add_stage() -- thanks, Robert Bunting

Files:

• django/trunk/django/contrib/admin/views/auth.py (modified) (3 diffs)

django/trunk/django/contrib/admin/views/auth.py

@@ +1 @@
+from django.contrib.admin.views.decorators import staff_member_required
-from django.contrib.auth.forms import UserCreationForm
-from django.contrib.auth.models import User
@@ -6 +7 @@
-
-def user_add_stage(request):
+    if not request.user.has_perm('auth.change_user'):
+        raise PermissionDenied
-    manipulator = UserCreationForm()
-    if request.method == 'POST':
@@ -38 +41 @@
-        'username_help_text': User._meta.get_field('username').help_text,
-    }, context_instance=template.RequestContext(request))
+user_add_stage = staff_member_required(user_add_stage)