Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The authentication was broken #163

Closed
GitBib opened this issue Jan 30, 2018 · 9 comments
Closed

The authentication was broken #163

GitBib opened this issue Jan 30, 2018 · 9 comments

Comments

@GitBib
Copy link

GitBib commented Jan 30, 2018

After installing the module on the site. Began to notice that some users see some pages of other users. How to fix this?
Django: 2.0.1
Python 3.6.4
django-hijack: 2.1.6
django-hijack-admin: 2.1.6

@walterrenner
Copy link
Contributor

What's the exact problem? Please provide more information on what is going on.

@GitBib
Copy link
Author

GitBib commented Jan 30, 2018

Problem:

  1. Capture the account Test from the account admin
  2. We go by page on behalf of Test
  3. Disable Capture Test
  4. We go on behalf of Test (in another browser)
  5. We see the pages on behalf of admin

Such a problem appeared after installing django-hijack and django-hijack-admin. Before this problem was not. In each of the views I use @login_required (login_url = '/ login')

@walterrenner
Copy link
Contributor

Whats exactly is happening in step 4?
You are logged in as "test" in another browser while doing steps 1 - 3?
In which browser do you see the page on behalt of admin? (step 5)

@GitBib
Copy link
Author

GitBib commented Jan 30, 2018

Without taking steps from 1 to 3. I go to another browser as a Test.
And at step 5, I look in the first browser where the steps from 1-3 were performed.

@GitBib
Copy link
Author

GitBib commented Jan 30, 2018

window 1, browser 1: admin account, page 1
window 2, browser 2: account test, page 1
window 3, browser 2: account test, page 2

As we see that for some reason we see data on the same page on the same page (although this should not be), and on the second page we see the data from the account test
564564

@GitBib
Copy link
Author

GitBib commented Jan 30, 2018

Changes like rollback, which were caused by django-hijack and django-hijack-admin?

@GitBib
Copy link
Author

GitBib commented Jan 30, 2018

repaired.

@GitBib GitBib closed this as completed Jan 30, 2018
@walterrenner
Copy link
Contributor

@GitBib the problem was caused by django-hijack?

@GitBib
Copy link
Author

GitBib commented Jan 31, 2018

@walterrenner partially. The cache was also involved.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants