#26133: AbstractBaseUser missing password validaton
-------------------------------+--------------------------------------
     Reporter:  hacknaked      |                    Owner:  nobody
         Type:  Uncategorized  |                   Status:  new
    Component:  contrib.auth   |                  Version:  1.9
     Severity:  Normal         |               Resolution:
     Keywords:                 |             Triage Stage:  Unreviewed
    Has patch:  0              |      Needs documentation:  0
  Needs tests:  0              |  Patch needs improvement:  0
Easy pickings:  0              |                    UI/UX:  0
-------------------------------+--------------------------------------
Changes (by hacknaked):

 * needs_better_patch:   => 0
 * needs_tests:   => 0
 * needs_docs:   => 0


Old description:

> Using the new password validation framework, it looks like
> {{{AbstractBaseUser}}} does not call password validators defined in
> {{{settings.py}}}:
>
> {{{
> # django.contrib.auth.models.py
>
> class AbstractBaseUser(models.Model):
>     password = models.CharField(_('password'), max_length=128)
> }}}
>
> I'd expect something like this in the above line:
>
> {{{
> class AbstractBaseUser(models.Model):
>     password = models.CharField(_('password'), max_length=128,
> validators=validators_list())
> }}}
>

> This issue is related to #25052, but I'm not sure.

New description:

 Using the new password validation framework, it looks like
 {{{AbstractBaseUser}}} does not call password validators defined in
 {{{settings.py}}}:

 {{{
 # django.contrib.auth.models.py

 class AbstractBaseUser(models.Model):
     password = models.CharField(_('password'), max_length=128)
     ...
 }}}

 I'd expect something like this in the above line:

 {{{
 class AbstractBaseUser(models.Model):
     password = models.CharField(_('password'), max_length=128,
 validators=validators_list())
 }}}


 This issue is related to #25052, but I'm not sure.

--

--
Ticket URL: <https://code.djangoproject.com/ticket/26133#comment:1>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/067.3b104a58605522f381e727be39c5cabc%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to