CGM_Public/pretix_original
2
0
Fork 1
mirror of https://github.com/pretix/pretix.git synced 2026-08-09 10:37:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fully block password change for non-native auth backend

Browse Source
This commit is contained in:
Mira Weller
2025-09-30 15:15:36 +02:00
parent cda950befc
commit 1fa84b772b
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/pretix/control/views/user.py
+6
View File
@@ -829,6 +829,9 @@ class UserPasswordChangeView(FormView):
template_name = 'pretixcontrol/user/change_password.html'
def get_form_kwargs(self):
if self.request.user.auth_backend != 'native':
raise PermissionDenied
return {
**super().get_form_kwargs(),
"user": self.request.user,
@@ -867,6 +870,9 @@ class UserEmailChangeView(RecentAuthenticationRequiredMixin, FormView):
template_name = 'pretixcontrol/user/change_email.html'
def get_form_kwargs(self):
if self.request.user.auth_backend != 'native':
raise PermissionDenied
return {
**super().get_form_kwargs(),
"user": self.request.user,