}, context_instance=RequestContext(request))\r
\r
\r
+@login_required\r
+def user_powers(request, id, action, status):\r
+ if not request.user.is_superuser:\r
+ return HttpResponseForbidden()\r
+\r
+ user = get_object_or_404(User, id=id)\r
+ new_state = action == 'grant'\r
+\r
+ if status == 'super':\r
+ user.is_superuser = new_state\r
+ elif status == 'staff':\r
+ user.is_staff = new_state\r
+ else:\r
+ raise Http404()\r
+\r
+ user.save() \r
+ return HttpResponseRedirect(user.get_profile_url())\r
+\r
\r
def user_view(template, tab_name, tab_description, page_title, private=False):\r
def decorator(fn):\r