mirror of
https://github.com/retspen/webvirtcloud
synced 2026-11-08 19:26:48 +00:00
6dabd69445
The forced change of the generated admin password was a session flag set at login when the password still matched data/admin_password. A new session after the file was gone bypassed it. - UserAttributes.must_change_password (migration 0007) holds it; the admin created with a generated password gets it, and a password change clears it. ForcePasswordChangeMiddleware reads it. - A system check (accounts.E001) stops the server unless the middleware follows AuthenticationMiddleware; the README has the settings change. - If the generated password cannot be stored privately, provisioning stops without printing it and without creating the admin (one transaction for the user and its attributes). - The admin is provisioned on any real migrate run while no user exists, so running migrate again after a failure creates it; flush (plan=None) and rollbacks of accounts are skipped. - The post_migrate receivers check the migration state for the models they use, so a targeted migrate on a fresh database (e.g. migrate appsettings) no longer fails with 'no such table'. |
||
|---|---|---|
| .. | ||
| 0001_initial.py | ||
| 0002_permissionset.py | ||
| 0003_auto_20200604_0930.py | ||
| 0004_auto_20200615_0637.py | ||
| 0005_auto_20200616_1039.py | ||
| 0006_alter_userattributes_id_alter_userinstance_id_and_more.py | ||
| 0007_userattributes_must_change_password.py | ||
| __init__.py | ||