summaryrefslogtreecommitdiff
path: root/django/contrib/auth
AgeCommit message (Collapse)Author
2008-10-06Fixed #8321 -- Change django.contrib.auth.models to use django.utils.hashcompatMalcolm Tredinnick
for consistency with other code. Thanks, magneto. git-svn-id: http://code.djangoproject.com/svn/django/trunk@9160 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-10-06Fixed #5753 -- Allow createsuperuser to work in situations where thereMalcolm Tredinnick
might be a valid password database entry for the current user id. git-svn-id: http://code.djangoproject.com/svn/django/trunk@9158 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-10-05Fixed #8660 -- Small database query optimisation in User.get_profile.Malcolm Tredinnick
When calling User.get_profile(), we now tell the profile object about the related User object right away. This can save a database lookup later if something in the user profile object wants to refer to the user object. Patch from Mike Malone. git-svn-id: http://code.djangoproject.com/svn/django/trunk@9152 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-31Fixed #8433 -- Deal with the add user popup on models that foreign key to ↵Brian Rosner
User correctly. Thanks sorl for the report and fix. git-svn-id: http://code.djangoproject.com/svn/django/trunk@8776 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-27Removed oldforms, validators, and related code:Gary Wilson Jr
* Removed `Manipulator`, `AutomaticManipulator`, and related classes. * Removed oldforms specific bits from model fields: * Removed `validator_list` and `core` arguments from constructors. * Removed the methods: * `get_manipulator_field_names` * `get_manipulator_field_objs` * `get_manipulator_fields` * `get_manipulator_new_data` * `prepare_field_objs_and_params` * `get_follow` * Renamed `flatten_data` method to `value_to_string` for better alignment with its use by the serialization framework, which was the only remaining code using `flatten_data`. * Removed oldforms methods from `django.db.models.Options` class: `get_followed_related_objects`, `get_data_holders`, `get_follow`, and `has_field_type`. * Removed oldforms-admin specific options from `django.db.models.fields.related` classes: `num_in_admin`, `min_num_in_admin`, `max_num_in_admin`, `num_extra_on_change`, and `edit_inline`. * Serialization framework * `Serializer.get_string_value` now calls the model fields' renamed `value_to_string` methods. * Removed a special-casing of `models.DateTimeField` in `core.serializers.base.Serializer.get_string_value` that's handled by `django.db.models.fields.DateTimeField.value_to_string`. * Removed `django.core.validators`: * Moved `ValidationError` exception to `django.core.exceptions`. * For the couple places that were using validators, brought over the necessary code to maintain the same functionality. * Introduced a SlugField form field for validation and to compliment the SlugField model field (refs #8040). * Removed an oldforms-style model creation hack (refs #2160). git-svn-id: http://code.djangoproject.com/svn/django/trunk@8616 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-27Fixed #8552 -- Use the LOGIN_REDIRECT_URL setting in the auth tests, rather ↵Malcolm Tredinnick
than hard-coding the value. This enables things to work properly when installed in other configurations. Patch from aeby. git-svn-id: http://code.djangoproject.com/svn/django/trunk@8613 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-25Fixed #8379: the admin user change form now properly validates the username. ↵Jacob Kaplan-Moss
Thanks, kratorius. git-svn-id: http://code.djangoproject.com/svn/django/trunk@8544 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-25Fixed #8344: make User.get_profile() work when settings.AUTH_PROFILE_MODULE ↵Jacob Kaplan-Moss
is unset. git-svn-id: http://code.djangoproject.com/svn/django/trunk@8543 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-25Fixed #7833: the user creation form now works when password1 isn't set.Jacob Kaplan-Moss
git-svn-id: http://code.djangoproject.com/svn/django/trunk@8542 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-24Added app_label to the context for the add user admin view.Russell Keith-Magee
git-svn-id: http://code.djangoproject.com/svn/django/trunk@8510 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-23Fixed #8359 -- Add an admin log entry when creating a new user.Malcolm Tredinnick
Patch from evan_schulz. git-svn-id: http://code.djangoproject.com/svn/django/trunk@8503 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-23Tests for password change process. Thanks, Mike Richardson. Fixed #8402.Malcolm Tredinnick
git-svn-id: http://code.djangoproject.com/svn/django/trunk@8497 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-23Fixed #8493 -- Fixed a NoReverseMatch when redirecting to ↵Brian Rosner
password_change/done/ in the admin. Added the ability to override redirects to other password change views for consistency. Thanks for the report mtrichardson. git-svn-id: http://code.djangoproject.com/svn/django/trunk@8473 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-21When logging in, change the session key whilst preserving any existingMalcolm Tredinnick
sesssion. This means the user will see their session preserved across a login boundary, but somebody snooping the anonymous session key won't be able to view the authenticated session data. This is the final piece of the session key handling changes. git-svn-id: http://code.djangoproject.com/svn/django/trunk@8459 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-15Removed unused and redefined imports.Gary Wilson Jr
git-svn-id: http://code.djangoproject.com/svn/django/trunk@8386 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-15Fixed #7364 -- Never cache the contrib.auth login view.Gary Wilson Jr
git-svn-id: http://code.djangoproject.com/svn/django/trunk@8383 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-14Fixed #6941 -- When logging a user out, or when logging in with an existingMalcolm Tredinnick
session and a different user id to the current session owner, flush the session data to avoid leakage. Logging in and moving from an anonymous user to a validated user still keeps existing session data. Backwards incompatible if you were assuming sessions persisted past logout. git-svn-id: http://code.djangoproject.com/svn/django/trunk@8343 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-12Fixed #8131: use reverse() in auth views. Patch from davenaff.Jacob Kaplan-Moss
git-svn-id: http://code.djangoproject.com/svn/django/trunk@8334 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-11Fixed #8226 -- Fixed a Python 2.3 incompatibility in a unicode string ↵Gary Wilson Jr
substitution, thanks nfg. git-svn-id: http://code.djangoproject.com/svn/django/trunk@8302 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-11Refs #7742 -- Removed unused `validator_list` argument (this is already ↵Gary Wilson Jr
being checked by the `UserCreationForm`). git-svn-id: http://code.djangoproject.com/svn/django/trunk@8293 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-10Fixed #8202 -- Moved user_change_password to UserAdmin. This enables ↵Brian Rosner
seamless integration of a custom UserAdmin. Thanks ElliottM for catching this. git-svn-id: http://code.djangoproject.com/svn/django/trunk@8283 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-10Fixed #7932 -- Made it easier to use a custom User model with the admin. ↵Brian Rosner
Added add_form attribute to UserAdmin and removed hard-coded dependancies to User. Thanks ElliottM for the patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@8280 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-08Fixed #7115: tweaked ordering on Permission to more closely match the ↵Jacob Kaplan-Moss
pre-QSRF behavior, which was nice. Thanks, Matthew Flanagan. git-svn-id: http://code.djangoproject.com/svn/django/trunk@8246 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-06Major refactoring of django.dispatch with an eye towards speed. The net ↵Jacob Kaplan-Moss
result is that signals are up to 90% faster. Though some attempts and backwards-compatibility were made, speed trumped compatibility. Thus, as usual, check BackwardsIncompatibleChanges for the complete list of backwards-incompatible changes. Thanks to Jeremy Dunck and Keith Busell for the bulk of the work; some ideas from Brian Herring's previous work (refs #4561) were incorporated. Documentation is, sigh, still forthcoming. Fixes #6814 and #3951 (with the new dispatch_uid argument to connect). git-svn-id: http://code.djangoproject.com/svn/django/trunk@8223 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-05Cleaned up whitespaceLuke Plant
git-svn-id: http://code.djangoproject.com/svn/django/trunk@8214 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-04Fixed #8901 -- Corrected typo in docstring. Thanks to Hayley Bonham ↵Russell Keith-Magee
<djangocode@vortex.cx> for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@8207 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-02Fixed #7919 -- md5 and sha modules are deprecated since Python 2.5, use ↵Gary Wilson Jr
hashlib module when available. Patch from Karen Tracey. git-svn-id: http://code.djangoproject.com/svn/django/trunk@8193 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-01Fixed #3062 - removed arbitrary and unneeded max_length on password fields ↵Luke Plant
in auth forms. git-svn-id: http://code.djangoproject.com/svn/django/trunk@8180 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-01Changed some URL conf regexes to rawstrings for consistencyLuke Plant
git-svn-id: http://code.djangoproject.com/svn/django/trunk@8172 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-08-01Added a login link to the password reset completion screen.Luke Plant
git-svn-id: http://code.djangoproject.com/svn/django/trunk@8171 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-07-31Fixed #7723 - implemented a secure password reset form that uses a token and ↵Luke Plant
prompts user for new password. git-svn-id: http://code.djangoproject.com/svn/django/trunk@8162 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-07-31Fixed #8042 -- Modified the password reset form so that the email field ↵Russell Keith-Magee
length matches the User model. Thanks to Bob Thomas <bthomas@ncircle.com> for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@8159 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-07-22Fixed #7847 -- Removed a whole bunch of unused imports from throughout the ↵Adrian Holovaty
codebase. Thanks, julien git-svn-id: http://code.djangoproject.com/svn/django/trunk@8046 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-07-22Fixed #7304 -- Gave AnonymousUser a has_perms() method, which it was lackingAdrian Holovaty
git-svn-id: http://code.djangoproject.com/svn/django/trunk@8044 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-07-19Fixed #7741: django.newforms is now django.forms. This is obviously a ↵Jacob Kaplan-Moss
backwards-incompatible change. There's a warning upon import of django.newforms itself, but deeper imports will raise errors. git-svn-id: http://code.djangoproject.com/svn/django/trunk@7971 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-07-18Merged the newforms-admin branch into trunk.Brian Rosner
This is a backward incompatible change. The admin contrib app has been refactored. The newforms module has several improvements including FormSets and Media definitions. git-svn-id: http://code.djangoproject.com/svn/django/trunk@7967 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-07-02Fixed a long and complex line by breaking into a for loop, with the added ↵Gary Wilson Jr
benefit that the method will now exit as soon as a matching permission is found instead of checking all of the user's permissions and putting them into a temporary list. git-svn-id: http://code.djangoproject.com/svn/django/trunk@7823 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-07-02Added docstring and other minor style fixes.Gary Wilson Jr
git-svn-id: http://code.djangoproject.com/svn/django/trunk@7822 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-06-30Refs #7521 -- Re-reverted [7716] (originally reverted in [7726]), now ↵Russell Keith-Magee
modified to use the new TestCase urlpattern framework. git-svn-id: http://code.djangoproject.com/svn/django/trunk@7808 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-06-30Fixed #6089 -- Removed default ordering on the User class.Malcolm Tredinnick
Admin users are still ordered, since we add it in specially for Admin. Slightly backwards incompatible. Patch from Erik Karulf. git-svn-id: http://code.djangoproject.com/svn/django/trunk@7806 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-06-26Fixed #6306 -- redirect_to_login() helper function now quotes the URL ↵Adrian Holovaty
arguments correctly. Thanks, SmileyChris git-svn-id: http://code.djangoproject.com/svn/django/trunk@7749 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-06-26Fixed #7274 -- Improved the django.contrib.auth password_reset() view not to ↵Adrian Holovaty
require the Sites framework. Thanks, joshrl git-svn-id: http://code.djangoproject.com/svn/django/trunk@7748 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-06-23Fixed #7521 -- Reverted [7716]. Fixed URLs in test case broke any ↵Russell Keith-Magee
application that deployed contrib.auth. git-svn-id: http://code.djangoproject.com/svn/django/trunk@7726 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-06-20Added basic tests for auth.views.password_resetLuke Plant
git-svn-id: http://code.djangoproject.com/svn/django/trunk@7716 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-06-18Fixed #3393: login view no longer assumes that set_test_cookie has been ↵Jacob Kaplan-Moss
called. This is mildly backwards-incompatible, but in the "now it works the way it should have all along" sense. Thanks to James and lcordier for the patches. git-svn-id: http://code.djangoproject.com/svn/django/trunk@7692 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-06-08Fixed #7394: fixed bug with syncdb and createsuperuser introduced in [7590]. ↵Jacob Kaplan-Moss
Thanks, av0000@mail.ru git-svn-id: http://code.djangoproject.com/svn/django/trunk@7598 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-06-08Fixed #7392 -- Corrected a typo in the backwards-compatibility layer to the ↵Russell Keith-Magee
new createsuperuser command. git-svn-id: http://code.djangoproject.com/svn/django/trunk@7596 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-06-08Fixed #5614: added 'manage.py createsuperuser'. Thanks, programmerq.Jacob Kaplan-Moss
git-svn-id: http://code.djangoproject.com/svn/django/trunk@7590 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-04-13Updated the inline help text for User.is_active.Malcolm Tredinnick
Fixed #6881. Refs #7011. git-svn-id: http://code.djangoproject.com/svn/django/trunk@7414 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2008-03-08Fixed #5922 -- Turned `ModelBackend` authentication backend into a new-style ↵Gary Wilson Jr
class, thanks `Honza_Kral`. git-svn-id: http://code.djangoproject.com/svn/django/trunk@7201 bcc190cf-cafb-0310-a4f2-bffc1f526a37