micro-users 1.3.0__tar.gz → 1.3.1__tar.gz

{micro_users-1.3.0 → micro_users-1.3.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: micro_users
-Version: 1.3.0
+Version: 1.3.1
 Summary: Arabic Django user management app with abstract user, permissions, and activity logging
 Home-page: https://github.com/debeski/micro-users
 Author: DeBeski
@@ -130,3 +130,4 @@ users/
 | v1.2.3   | • Separated user detail view from table for consistency<br> • Optimized the new detail + log view for optimal compatibiliyy with users |
 | v1.2.4   | • Fixed a couple of visual inconsistencies |
 | v1.3.0   | • Patched a critical security permission issue<br> • Disabled ADMIN from being viewed/edited from other staff members<br> • Fixed an issue when sorting with full_name<br> • Enabled Logging for all actions |
+| v1.3.1   | • replaced a misplaced code that caused a crash when editing profile |

{micro_users-1.3.0 → micro_users-1.3.1}/README.md

@@ -98,4 +98,5 @@ users/
 | v1.2.1   | • Fixed a minor import bug |
 | v1.2.3   | • Separated user detail view from table for consistency<br> • Optimized the new detail + log view for optimal compatibiliyy with users |
 | v1.2.4   | • Fixed a couple of visual inconsistencies |
-| v1.3.0   | • Patched a critical security permission issue<br> • Disabled ADMIN from being viewed/edited from other staff members<br> • Fixed an issue when sorting with full_name<br> • Enabled Logging for all actions |
+| v1.3.0   | • Patched a critical security permission issue<br> • Disabled ADMIN from being viewed/edited from other staff members<br> • Fixed an issue when sorting with full_name<br> • Enabled Logging for all actions |
+| v1.3.1   | • replaced a misplaced code that caused a crash when editing profile |

{micro_users-1.3.0 → micro_users-1.3.1}/micro_users.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: micro-users
-Version: 1.3.0
+Version: 1.3.1
 Summary: Arabic Django user management app with abstract user, permissions, and activity logging
 Home-page: https://github.com/debeski/micro-users
 Author: DeBeski
@@ -130,3 +130,4 @@ users/
 | v1.2.3   | • Separated user detail view from table for consistency<br> • Optimized the new detail + log view for optimal compatibiliyy with users |
 | v1.2.4   | • Fixed a couple of visual inconsistencies |
 | v1.3.0   | • Patched a critical security permission issue<br> • Disabled ADMIN from being viewed/edited from other staff members<br> • Fixed an issue when sorting with full_name<br> • Enabled Logging for all actions |
+| v1.3.1   | • replaced a misplaced code that caused a crash when editing profile |

{micro_users-1.3.0 → micro_users-1.3.1}/pyproject.toml

@@ -8,7 +8,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "micro_users"
-version = "1.3.0"
+version = "1.3.1"
 description = "Arabic Django user management app with abstract user, permissions, and activity logging"
 readme = "README.md"
 requires-python = ">=3.11"

{micro_users-1.3.0 → micro_users-1.3.1}/setup.py

@@ -5,7 +5,7 @@ with open("README.md", "r", encoding="utf-8") as fh:
 
 setup(
     name="micro_users",
-    version="1.3.0",
+    version="1.3.1",
     author="DeBeski",
     author_email="debeski1@gmail.com",
     description="Arabic django user management app with abstract user, permissions, and activity logging",

{micro_users-1.3.0 → micro_users-1.3.1}/users/views.py

@@ -100,6 +100,12 @@ def create_user(request):
 @user_passes_test(is_staff)
 def edit_user(request, pk):
     user = get_object_or_404(User, pk=pk)
+    
+    # 🚫 Block staff users from editing superuser accounts
+    if user.is_superuser and not request.user.is_superuser:
+        messages.error(request, "لا يمكن تعديل هذا الحساب!")
+        return redirect('manage_users')
+
     form_reset = ResetPasswordForm(user, data=request.POST or None)
 
     if request.method == "POST":
@@ -216,12 +222,6 @@ def user_profile(request):
 # Function for editing the user profile
 @login_required
 def edit_profile(request):
-
-    # 🚫 Block staff users from editing superuser accounts
-    if request.user.is_superuser and not request.user.is_superuser:
-        messages.error(request, "لا يمكنك تعديل حساب المدير!")
-        return redirect('user_profile')
-
     if request.method == 'POST':
         form = UserProfileEditForm(request.POST, request.FILES, instance=request.user)
         if form.is_valid():
@@ -231,9 +231,6 @@ def edit_profile(request):
             return redirect('user_profile')
         else:
             messages.error(request, 'حدث خطأ أثناء حفظ التغييرات')
-
     else:
         form = UserProfileEditForm(instance=request.user)
-
     return render(request, 'users/profile_edit.html', {'form': form})
-