j3d1/webvirtcloud
1
0
Fork 0
mirror of https://github.com/retspen/webvirtcloud synced 2026-11-09 11:46:49 +00:00
Code Issues Projects Releases Wiki Activity

feat(admin): a password an administrator sets can be one the user must change

Browse source 
The administrator's password form has "The user must change it at their
next login". With it, the user is sent to the change form until they
choose their own, as the generated admin password already does.
This commit is contained in:
catborise 2026-10-25 22:26:23 +03:00
parent 0e8130f1b0
commit 24896aaecd
4 changed files with 33 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

18
admin/tests/test_user_pages.py
View file

@ -1,5 +1,6 @@
"""The Users pages: an administrator cannot lock their own account out, and
the user form says what its fields mean."""
"""The Users pages: an administrator cannot lock their own account out, the
user form says what its fields mean, and a password set by an administrator
can be one the user must change."""
from accounts.models import UserAttributes
from django.contrib.auth import get_user_model
@ -65,3 +66,16 @@ class UserPagesTests(TestCase):
page = html.fromstring(self.client.get(reverse("admin:user_list")).content)
(row,) = [r for r in page.xpath("//tbody/tr") if r.xpath("td")[0].text_content().strip() == "up-alice"]
self.assertEqual(row.xpath("td")[2].text_content().strip(), "never")
def test_a_password_set_by_an_administrator_can_be_one_to_change(self):
url = reverse("admin:user_update_password", args=[self.alice.pk])
self.client.post(url, {"password1": "New-pw-4567x", "password2": "New-pw-4567x", "must_change_password": "on"})
self.assertTrue(UserAttributes.objects.get(user=self.alice).must_change_password)
# the user is sent to the change form until they choose their own
self.alice.refresh_from_db() # the new password's hash, or the session is not hers
self.client.force_login(self.alice)
self.assertRedirects(self.client.get(reverse("instances:index")), reverse("accounts:change_password"),
fetch_redirect_response=False)
self.client.force_login(self.admin)
self.client.post(url, {"password1": "New-pw-4567y", "password2": "New-pw-4567y"})
self.assertFalse(UserAttributes.objects.get(user=self.alice).must_change_password)