#26035: usertools block in admin console visible after logout
-------------------------------+-------------------------------
     Reporter:  scottpashley   |      Owner:  scottpashley
         Type:  Bug            |     Status:  new
    Component:  contrib.admin  |    Version:  master
     Severity:  Normal         |   Keywords:  admin, logout, ui
 Triage Stage:  Unreviewed     |  Has patch:  0
Easy pickings:  0              |      UI/UX:  1
-------------------------------+-------------------------------
 When a user logs out of the admin interface, they get directed to a page
 (/admin/logout/) which acknowledges that the user is logged out of the
 system.

 In the top right hand corner of the screen, the welcome string is still
 visible (without the username), as are the "view site" and "log out"
 links. This block should no longer be visible as the user is now logged
 out at this point.

 This is happening because the block is visible as long as {{{
 has_permission }}} returns True.

 I suggest that we also check that the user is authenticated using {{{
 user.is_authenticated }}} in addition to the current check.

--
Ticket URL: <https://code.djangoproject.com/ticket/26035>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/055.59466f1bec9169fdaf0c26c5623f1ebb%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to