mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-10-24 06:06:09 +00:00
Code Issues 32 Releases Wiki Activity

Fixed #24987 -- Allowed inactive users to login with the test client.

Browse Source
This commit is contained in:
Alexander Gaevsky
2016-02-05 21:03:06 +02:00
committed by Tim Graham
parent e0a3d93730
commit 107165c4b0
4 changed files with 18 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
docs/topics/testing/tools.txt
View File

@@ -334,13 +334,6 @@ Use the ``django.test.Client`` class to make requests.
``login()`` method to simulate the effect of a user logging into the
site.
Inactive users (:attr:`is_active=False
<django.contrib.auth.models.User.is_active>`) are not permitted to
login as this method is meant to be equivalent to the
:func:`~django.contrib.auth.login` view which uses
:class:`~django.contrib.auth.forms.AuthenticationForm` and therefore
defaults to rejecting users who are inactive.
After you call this method, the test client will have all the cookies
and session data required to pass any login-based tests that may form
part of a view.
@@ -378,6 +371,12 @@ Use the ``django.test.Client`` class to make requests.
:meth:`~django.contrib.auth.models.UserManager.create_user` helper
method to create a new user with a correctly hashed password.
.. versionchanged:: 1.10
In previous versions, inactive users (:attr:`is_active=False
<django.contrib.auth.models.User.is_active>`) were not permitted
to login.
.. method:: Client.force_login(user, backend=None)
.. versionadded:: 1.9