Mercurial > kallithea
diff rhodecode/controllers/admin/users.py @ 3021:b2b93614a7cd beta
Implemented #658 Changing username in LDAP-Mode should not be allowed.
Those username are autocreated, changing them will end up with new account creation after user logs
in again
| author | Marcin Kuzminski <marcin@python-works.com> |
|---|---|
| date | Fri, 23 Nov 2012 21:57:40 +0100 |
| parents | d2d35cf2b351 |
| children | a5f0bc867edc 9b92cf5a0cca |
line wrap: on
line diff
--- a/rhodecode/controllers/admin/users.py Fri Nov 23 16:59:30 2012 +0100 +++ b/rhodecode/controllers/admin/users.py Fri Nov 23 21:57:40 2012 +0100 @@ -158,13 +158,18 @@ # url('user', id=ID) user_model = UserModel() c.user = user_model.get(id) + c.ldap_dn = c.user.ldap_dn c.perm_user = AuthUser(user_id=id) _form = UserForm(edit=True, old_data={'user_id': id, 'email': c.user.email})() form_result = {} try: form_result = _form.to_python(dict(request.POST)) - user_model.update(id, form_result) + skip_attrs = [] + if c.ldap_dn: + #forbid updating username for ldap accounts + skip_attrs = ['username'] + user_model.update(id, form_result, skip_attrs=skip_attrs) usr = form_result['username'] action_logger(self.rhodecode_user, 'admin_updated_user:%s' % usr, None, self.ip_addr, self.sa) @@ -233,6 +238,7 @@ c.user_email_map = UserEmailMap.query()\ .filter(UserEmailMap.user == c.user).all() user_model = UserModel() + c.ldap_dn = c.user.ldap_dn defaults = c.user.get_dict() defaults.update({ 'create_repo_perm': user_model.has_perm(id, 'hg.create.repository'),