Geek asks and answers

User management methods create () and create_user ()

I came across some suspicious behavior of the create()object manager method User. Apparently, a field is passwordnot required to create an object Userif you use this method. As a result, you will get Usera space password. If you use the method create_userand do not specify password, it creates Userwith an unusable password (before set_unusable_password()).

I am not sure why the method create()does not execute raise exceptionwhen trying to create a user without password- in the documentation he indicated that this field is necessary. Is there something wrong with the method create()/ documentation?

+5
source share
2 answers

UserManager.create_user() . QuerySet.create() User:

  • python manage.py sql, auth_user:

    CREATE TABLE "auth_user" (
    ...
    "password" varchar(128) NOT NULL,
    ...
)

    SQL '' NULL, ISNULL('') != TRUE.

  • QuerySet.create() QuerySet.update() . , ModelForm Model.full_clean().

    API QuerySet Django. - User.objects.create(username='foo', password=''), CharField().validate(value='', None) ValidationError .

, , User.objects.create() User.objects.create_user() .

+9

django. , :

class UserManager(models.Manager):
    # ...   
    def create_user(self, username, email=None, password=None):
        """
        Creates and saves a User with the given username, email and password.
        """
        now = timezone.now()
        if not username:
            raise ValueError('The given username must be set')
        email = UserManager.normalize_email(email)
        user = self.model(username=username, email=email,
                          is_staff=False, is_active=True, is_superuser=False,
                          last_login=now, date_joined=now)

        user.set_password(password)
        user.save(using=self._db)
        return user
0

More articles:


All Articles