Fix to only update the user's password if a non-empty password string is provided.

This commit is contained in:
Chris Church 2013-06-30 13:00:16 -04:00
parent adcc402910
commit 689765c587

View File

@ -629,7 +629,7 @@ class UserDetail(BaseDetail):
if changed:
raise PermissionDenied('Cannot change %s' % ', '.join(changed.keys()))
if 'password' in request.DATA:
if 'password' in request.DATA and request.DATA['password']:
obj.set_password(request.DATA['password'])
obj.save()
request.DATA.pop('password')