Context Navigation

Ticket #18923: 18923.diff

File 18923.diff, 2.0 KB (added by Tim Graham, 11 years ago)

diff --git a/django/contrib/auth/admin.py b/django/contrib/auth/admin.py
index e7cf8a3..ff08f41 100644

                from django.views.decorators.csrf import csrf_protect
 from django.views.decorators.debug import sensitive_post_parameters
 csrf_protect_m = method_decorator(csrf_protect)
+sensitive_post_parameters_m = method_decorator(sensitive_post_parameters())
 class GroupAdmin(admin.ModelAdmin):
-…
+               class UserAdmin(admin.ModelAdmin):
             return False
         return super(UserAdmin, self).lookup_allowed(lookup, value)
     @sensitive_post_parameters()
+    @sensitive_post_parameters_m
     @csrf_protect_m
     @transaction.atomic
     def add_view(self, request, form_url='', extra_context=None):
-…
+               class UserAdmin(admin.ModelAdmin):
         return super(UserAdmin, self).add_view(request, form_url,
                                                extra_context)
     @sensitive_post_parameters()
+    @sensitive_post_parameters_m
     def user_change_password(self, request, id, form_url=''):
         if not self.has_change_permission(request):
             raise PermissionDenied

diff --git a/django/views/decorators/debug.py b/django/views/decorators/debug.py
index 78ae6b1..a611981 100644

-              a
 import functools
+from django.http import HttpRequest
 def sensitive_variables(*variables):
     """
-…
+               def sensitive_post_parameters(*parameters):
     def decorator(view):
         @functools.wraps(view)
         def sensitive_post_parameters_wrapper(request, *args, **kwargs):
+            assert isinstance(request, HttpRequest), (
+              "sensitive_post_parameters didn't receive an HttpRequest. If you "
+              "are decorating a classmethod, be sure to use @method_decorator."
+            )
             if parameters:
                 request.sensitive_post_parameters = parameters
             else: