summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJacob Kaplan-Moss <jacob@jacobian.org>2009-04-18 21:04:40 +0000
committerJacob Kaplan-Moss <jacob@jacobian.org>2009-04-18 21:04:40 +0000
commitab562bf954ca0514765b1f135b63e28e5f8f4434 (patch)
tree29e7cd90188aa17aed70f802926b3da217c900b2
parentccc8e104eef01752f078bedc99ca6b756e1f048c (diff)
Fixed #10694: correctly check permissions in the change password admin. Thanks, jturnbull.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@10591 bcc190cf-cafb-0310-a4f2-bffc1f526a37
-rw-r--r--django/contrib/auth/admin.py2
1 files changed, 1 insertions, 1 deletions
diff --git a/django/contrib/auth/admin.py b/django/contrib/auth/admin.py
index dedeb01b47..34691c00cd 100644
--- a/django/contrib/auth/admin.py
+++ b/django/contrib/auth/admin.py
@@ -96,7 +96,7 @@ class UserAdmin(admin.ModelAdmin):
}, context_instance=template.RequestContext(request))
def user_change_password(self, request, id):
- if not request.user.has_perm('auth.change_user'):
+ if not self.has_change_permission(request):
raise PermissionDenied
user = get_object_or_404(self.model, pk=id)
if request.method == 'POST':