#17944: Unable to access to User record in the admin if the user has a 
unmanageable
password
-------------------------------+------------------------
     Reporter:  saxix          |      Owner:  nobody
         Type:  Uncategorized  |     Status:  new
    Component:  contrib.auth   |    Version:  1.4-beta-1
     Severity:  Normal         |   Keywords:
 Triage Stage:  Unreviewed     |  Has patch:  1
Easy pickings:  0              |      UI/UX:  0
-------------------------------+------------------------
 If the user has a unmanageable password (ie no hashers found)
 ReadOnlyPasswordHashWidget reraise  ValueError up to the UI, this prevents
 to access to the user record if the form contains
 ReadOnlyPasswordHashWidget ( admin ), this happen also for blank password.
 If the system use a custom backend with external authentication there is
 no reason for django to known the password algorithm, but should be still
 possible to access to the user record.
 The patch simply surround the involved lined into the
 ReadOnlyPasswordHashWidget.render() and display a 'Unknown password
 hashing algorithm' message instead.
 Not sure if the message could be improved/changed.

-- 
Ticket URL: <https://code.djangoproject.com/ticket/17944>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-updates@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Reply via email to