diff options
| author | Dylan Verheul <dylan@zostera.nl> | 2017-07-12 12:07:06 +0200 |
|---|---|---|
| committer | Tim Graham <timograham@gmail.com> | 2018-02-16 13:58:55 -0500 |
| commit | 9b1125bfc7e2dc747128e6e7e8a2259ff1a7d39f (patch) | |
| tree | 4044872d7364729559a87fb1e3f508fc02586d07 /django | |
| parent | e307ff29d28737d5a764ce2fa7db010231d6fc8e (diff) | |
Fixed #28379 -- Made AccessMixin raise Permissiondenied for authenticated users.
Diffstat (limited to 'django')
| -rw-r--r-- | django/contrib/auth/mixins.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/django/contrib/auth/mixins.py b/django/contrib/auth/mixins.py index a06e04dadd..362a734f96 100644 --- a/django/contrib/auth/mixins.py +++ b/django/contrib/auth/mixins.py @@ -39,7 +39,7 @@ class AccessMixin: return self.redirect_field_name def handle_no_permission(self): - if self.raise_exception: + if self.raise_exception or self.request.user.is_authenticated: raise PermissionDenied(self.get_permission_denied_message()) return redirect_to_login(self.request.get_full_path(), self.get_login_url(), self.get_redirect_field_name()) |