Opened 15 years ago
Closed 15 years ago
#14838 closed (duplicate)
django admin: a staff memeber can delete itself
| Reported by: | anonymous | Owned by: | nobody |
|---|---|---|---|
| Component: | Contrib apps | Version: | 1.2 |
| Severity: | Keywords: | ||
| Cc: | lists@… | Triage Stage: | Unreviewed |
| Has patch: | no | Needs documentation: | no |
| Needs tests: | no | Patch needs improvement: | no |
| Easy pickings: | no | UI/UX: | no |
Description
If you give to a staff member the "can delete user" permission, then it can delete itself. Delete user operation should be disabled for the actually logged in user
Change History (3)
comment:1 by , 15 years ago
| Cc: | added |
|---|
comment:2 by , 15 years ago
| Cc: | added; removed |
|---|
comment:3 by , 15 years ago
| Resolution: | → duplicate |
|---|---|
| Status: | new → closed |
Note:
See TracTickets
for help on using tickets.
Dupe of #8159.