Merge pull request #2486 from rooftopcellist/fix_change_pass

selectively clear sesh on pass change
This commit is contained in:
Christian Adams
2018-07-11 10:59:06 -04:00
committed by GitHub

View File

@@ -925,7 +925,8 @@ class UserSerializer(BaseSerializer):
if new_password:
obj.set_password(new_password)
obj.save(update_fields=['password'])
UserSessionMembership.clear_session_for_user(obj)
if self.context['request'].user != obj:
UserSessionMembership.clear_session_for_user(obj)
elif not obj.password:
obj.set_unusable_password()
obj.save(update_fields=['password'])