Passwort ändern in Django Admin

Question

Ich habe vor kurzem die admin.py mit Sitz in der Django-Projekt-Dokument:

https://docs.djangoproject.com/en/dev/topics/auth/customizing/#django.contrib.auth.models.AbstractBaseUser

Aber ich wirklich vermisst die Funktionalität, die dem Administrator die Möglichkeit zu ändern, um die Benutzer-Passwörter erlauben. Wie ist es möglich, diese Funktionalität hinzuzufügen? Ich habe einfach den Code kopiert und eingefügt, der im obigen Link steht.

from django import forms 
from django.contrib import admin 
from django.contrib.auth.models import Group 
from django.contrib.auth.admin import UserAdmin 
from django.contrib.auth.forms import ReadOnlyPasswordHashField 

from customauth.models import MyUser 


class UserCreationForm(forms.ModelForm): 
    """A form for creating new users. Includes all the required 
    fields, plus a repeated password.""" 
    password1 = forms.CharField(label='Password', widget=forms.PasswordInput) 
    password2 = forms.CharField(label='Password confirmation', widget=forms.PasswordInput) 

    class Meta: 
     model = MyUser 
     fields = ('email', 'date_of_birth') 

    def clean_password2(self): 
     # Check that the two password entries match 
     password1 = self.cleaned_data.get("password1") 
     password2 = self.cleaned_data.get("password2") 
     if password1 and password2 and password1 != password2: 
      raise forms.ValidationError("Passwords don't match") 
     return password2 

    def save(self, commit=True): 
     # Save the provided password in hashed format 
     user = super(UserCreationForm, self).save(commit=False) 
     user.set_password(self.cleaned_data["password1"]) 
     if commit: 
      user.save() 
     return user 


class UserChangeForm(forms.ModelForm): 
    """A form for updating users. Includes all the fields on 
    the user, but replaces the password field with admin's 
    password hash display field. 
    """ 
    password = ReadOnlyPasswordHashField() 

    class Meta: 
     model = MyUser 

    def clean_password(self): 
     # Regardless of what the user provides, return the initial value. 
     # This is done here, rather than on the field, because the 
     # field does not have access to the initial value 
     return self.initial["password"] 


class MyUserAdmin(UserAdmin): 
    # The forms to add and change user instances 
    form = UserChangeForm 
    add_form = UserCreationForm 

    # The fields to be used in displaying the User model. 
    # These override the definitions on the base UserAdmin 
    # that reference specific fields on auth.User. 
    list_display = ('email', 'date_of_birth', 'is_admin') 
    list_filter = ('is_admin',) 
    fieldsets = (
     (None, {'fields': ('email', 'password')}), 
     ('Personal info', {'fields': ('date_of_birth',)}), 
     ('Permissions', {'fields': ('is_admin',)}), 
     ('Important dates', {'fields': ('last_login',)}), 
    ) 
    add_fieldsets = (
     (None, { 
      'classes': ('wide',), 
      'fields': ('email', 'date_of_birth', 'password1', 'password2')} 
     ), 
    ) 
    search_fields = ('email',) 
    ordering = ('email',) 
    filter_horizontal =() 

# Now register the new UserAdmin... 
admin.site.register(MyUser, MyUserAdmin) 
# ... and, since we're not using Django's builtin permissions, 
# unregister the Group model from admin. 
admin.site.unregister(Group) 

[UPDATE - Added Information] Ich habe die folgenden Informationen aber ich habe immer nur das Passwort zu sehen (crypted) in einem schreibgeschützten Bereich. Wie ist es möglich, einen Link hinzuzufügen, um das Passwort zu ändern?

fieldsets = (
    ('Permissions', {'fields': ('is_active', 'is_admin','password')}), 
) 
add_fieldsets = (
    (None, { 
     'classes': ('wide',), 
     'fields': ('email', 'password')} 
    ), 
) 

Answer 1

Setzen Sie diese in Ihrem UserChangeForm:

password = ReadOnlyPasswordHashField(label= ("Password"), 
     help_text= ("Raw passwords are not stored, so there is no way to see " 
        "this user's password, but you can change the password " 
        "using <a href=\"password/\">this form</a>.")) 

-Code von hier entlehnt: http://hdknr.github.com/docs/django/modules/django/contrib/auth/forms.html

Answer 2

('Permissions', {'fields': ('is_active', 'is_superuser',)}), 

Answer 3

Ich habe diese Methode, um meine UserAdmin Klasse:

def save_model(self, request, obj, form, change): 
    # Override this to set the password to the value in the field if it's 
    # changed. 
    if obj.pk: 
     orig_obj = models.User.objects.get(pk=obj.pk) 
     if obj.password != orig_obj.password: 
      obj.set_password(obj.password) 
    else: 
     obj.set_password(obj.password) 
    obj.save() 

Sie c Das Passwortfeld wird normalerweise angezeigt, aber Admins sehen nur das Hash-Passwort. Wenn sie es ändern, wird der neue Wert dann gehashed und gespeichert.

Dadurch wird bei jedem Speichern eines Benutzers über den Administrator eine einzige Abfrage hinzugefügt. Dies sollte generell kein Problem sein, da die meisten Systeme keine Administratoren haben, die Benutzer intensiv bearbeiten.

Answer 4

password = ReadOnlyPasswordHashField(label= ("Password"), 
     help_text= ("Raw passwords are not stored, so there is no way to see " 
        "this user's password, but you can change the password " 
        "using <a href=\"../password/\">this form</a>.")) 

Es gibt Änderung der href, die für frühere Versionen von django Sie

<a href=\"/password/\">this form</a> verwenden können.

Für django 1.9+ <a href=\"../password/\">this form</a>