Opened 18 years ago

Closed 18 years ago

Last modified 18 years ago

#3087 closed enhancement (wontfix)

[patch] users which are not staff try login into admin - provide better error message

Reported by: John D'Agostino <john.dagostino@…> Owned by: Adrian Holovaty
Component: contrib.admin Version:
Severity: minor Keywords: admin
Cc: Triage Stage: Unreviewed
Has patch: yes Needs documentation: no
Needs tests: no Patch needs improvement: no
Easy pickings: no UI/UX: no

Description

currently if a user tries to login to the admin site and they aren't is_staff they are prompted with the standard error "Please enter a correct username and password." this patch instead prompts them with the message that they don't have the permission to access the site.

we use this on our site, because wondering users have "stumbled" upon the admin log in.

Change History (4)

by John D'Agostino <john.dagostino@…>, 18 years ago

Attachment: patch.diff​ added

comment:1 by John D'Agostino <john.dagostino@…>, 18 years ago

Summary: users which are not staff try login into admin - provide better error message → [patch] users which are not staff try login into admin - provide better error message

comment:2 by Adrian Holovaty, 18 years ago

Resolution: → wontfix
Status: new → closed

It's intentional that the error message is the same for both cases. It's a bit of security by obscurity.

comment:3 by John D'Agostino <john.dagostino@…>, 18 years ago

thought as such. Thanks Adrian

Note: See TracTickets for help on using tickets.
Back to Top