Re: Proposal: Logout user when they change their password.

2012-01-07 Thread Florian Apolloner
And how could we do that? Sessions aren't linked to the user (well they are, but not in a queryable way). Cheers, Florian -- You received this message because you are subscribed to the Google Groups "Django developers" group. To view this discussion on the web visit https://groups.google.com/

Sprint in Kraków (Poland)

2012-01-07 Thread Tomek Paczkowski
Hello! I have a pleasure of announcing a Django sprint in Kraków, Poland. The sprint will take place on February 4th and 5th in a spacious office provided by HiddenData at Rynek Główny 17 (that's the main square). You can find map on sprint home page: http://sprint.pykonik.org/ If you're planning

Re: Proposal: Logout user when they change their password.

2012-01-07 Thread Karthik Abinav
Hi, Yes. I agree with Arnoud. I have always felt a need to have such a implementation with the default installation. I feel the auth system should provide an in-built logout all sessions feature otherwise as mentioned can comprimise heavily on the security if the developer doesnt take car

Proposal: Logout user when they change their password.

2012-01-07 Thread Arnoud van Heuvelen
Hi, I recently ran into a minor security issue with Django Auth. Currently, when a user changes their password, the user will stay logged in on all open sessions. This is a problem when a password is compromised. The user will change their password and be confident that the problem is solved. How