From 0740ae72a79a9027a484e4d17adad91142c8df83 Mon Sep 17 00:00:00 2001 From: Mark Sapiro Date: Tue, 26 Apr 2011 13:57:37 -0700 Subject: Since context may be AuthUser, we must refresh the cookie where we have a user. --- Mailman/SecurityManager.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Mailman/SecurityManager.py b/Mailman/SecurityManager.py index 5d5acd5b..55536aa1 100644 --- a/Mailman/SecurityManager.py +++ b/Mailman/SecurityManager.py @@ -233,8 +233,6 @@ class SecurityManager: for ac in authcontexts: ok = self.CheckCookie(ac, user) if ok: - # Refresh the cookie - print self.MakeCookie(ac, user) return True # Check passwords ac = self.Authenticate(authcontexts, response, user) @@ -321,6 +319,8 @@ class SecurityManager: for u in usernames]: ok = self.__checkone(c, authcontext, user) if ok: + # Refresh the cookie + print self.MakeCookie(authcontext, user) return True return False else: -- cgit v1.2.3