#37017: alogout() doesn't clear request.user
-------------------------------------+-------------------------------------
     Reporter:  Jacob Walls          |                    Owner:  Jacob
                                     |  Walls
         Type:  Bug                  |                   Status:  closed
    Component:  contrib.auth         |                  Version:  6.0
     Severity:  Release blocker      |               Resolution:  fixed
     Keywords:  not-security         |             Triage Stage:  Ready for
                                     |  checkin
    Has patch:  1                    |      Needs documentation:  0
  Needs tests:  0                    |  Patch needs improvement:  0
Easy pickings:  0                    |                    UI/UX:  0
-------------------------------------+-------------------------------------
Comment (by Jacob Walls <jacobtylerwalls@…>):

 In [changeset:"a5c28dc1d7606f11adb932d0bd4dba899a028007" a5c28dc]:
 {{{#!CommitTicketReference repository=""
 revision="a5c28dc1d7606f11adb932d0bd4dba899a028007"
 [6.0.x] Fixed #37017 -- Fixed setting or clearing of request.user after
 alogin/alogout().

 Regression in 31a43c571f4d036827d4fd7a5f615591637dc1be.

 Backport of a32c7075cf634aee1f4f3deecd27f194097ec0c2 from main.
 }}}
-- 
Ticket URL: <https://code.djangoproject.com/ticket/37017#comment:6>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion visit 
https://groups.google.com/d/msgid/django-updates/0107019d4e49e128-9107455b-286e-4863-82ce-643512da549e-000000%40eu-central-1.amazonses.com.

Reply via email to