Disallow changing of the username in mysql_login.
authorMatthijs Kooijman <matthijs@stdin.nl>
Thu, 2 Jul 2009 15:01:44 +0000 (17:01 +0200)
committerMatthijs Kooijman <matthijs@stdin.nl>
Thu, 2 Jul 2009 15:01:44 +0000 (17:01 +0200)
conf/auth/mysql_login.py

index 1e3558fdebe39f69d2fb092d2d90bab39b9cb7cd..95b3aa660c4e93fe9cb1a2aac0e24bf499ce4278 100644 (file)
@@ -118,7 +118,7 @@ class mysql_login(BaseAuth):
 
             if self.verbose: request.log("mysql_login: authenticated %s (email %s)" % (username, email))
 
 
             if self.verbose: request.log("mysql_login: authenticated %s (email %s)" % (username, email))
 
-            u = user.User(request, auth_username=username, auth_method=self.name, auth_attribs=('password', 'email', ))
+            u = user.User(request, auth_username=username, auth_method=self.name, auth_attribs=('name', 'password', 'email'))
             u.email = email
             #u.remember_me = 0 # 0 enforces cookie_lifetime config param
             u.create_or_update(True)
             u.email = email
             #u.remember_me = 0 # 0 enforces cookie_lifetime config param
             u.create_or_update(True)