#22515: Change user password creates a LogEntry with incorrect user
-------------------------------+--------------------
Reporter: ross@… | Owner: nobody
Type: Bug | Status: new
Component: contrib.admin | Version: 1.6
Severity: Normal | Keywords:
Triage Stage: Unreviewed | Has patch: 0
Easy pickings: 1 | UI/UX: 0
-------------------------------+--------------------
When changing the password of a user in the Admin, an admin log entry is
created (LogEntry) that records the password change.
'''What I expected:'''
Changing the password of a user I expect the LogEntry to record the user
who performed the action, and the user upon whom the action was completed.
'''What I got:'''
The LogEntry records my user changing the password of my user.
'''Repro:'''
1. Log in as a super-user (in my case 'ross')
2. Change the password of any other user (in my case 'bob')
3. Check the LogEntry which will show an action by 'ross' against 'ross'.
I believe the issue may be at
https://github.com/django/django/blob/fd23c06023a0585ee743c0752dc94da66694cf63/django/contrib/auth/admin.py#L132
and that user should be passed in, rather than request.user.
--
Ticket URL: <https://code.djangoproject.com/ticket/22515>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/064.edfff4e5ac08bb89a998d34b78bac45c%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.
