id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
18923	user admin sensitive_post_parameters needs method_decorator	zbohm	nobody	"Decorator '''sensitive_post_parameters''' does not work with class method and `method_decorator(sensitive_post_parameters)` also does not help.

contrib/auth/admin.py:
{{{
#!python
@sensitive_post_parameters()
def user_change_password(self, request, id, form_url=''):
    if not self.has_change_permission(request):
        raise PermissionDenied
    user = get_object_or_404(self.queryset(request), pk=id)
    if request.method == 'POST':
        raise Exception(""Show me the debug page."")
}}}
do not hide POST parameters on the output:
{{{
Variable 	Value
password_form 	u'1'
csrfmiddlewaretoken 	u'BC3JzQcQAUlhnEGKwykvJfNfRCN28NA2'
old_password 	u'oldpassword'
new_password1 	u'newpassword'
new_password2 	u'newpassword'
}}}
"	Bug	closed	contrib.auth	dev	Normal	fixed		cmawebsite@… timograham@…	Accepted	1	0	0	0	1	0