Fixing OSQA-197

git-svn-id: http://svn.osqa.net/svnroot/osqa/trunk@88 0cfe37f9-358a-4d5e-be75-b63607b5c754

diff --git a/forum/views/auth.py b/forum/views/auth.py
index 9dafc410c9595bc95bd16708f128e677e187603f..4857b715e1854ba55efeb365ce2352b1fc5fbe1e 100644 (file)
--- a/forum/views/auth.py
+++ b/forum/views/auth.py
@@ -312,6 +312,8 @@ def auth_settings(request):
 
 def remove_external_provider(request, id):
     association = get_object_or_404(AuthKeyUserAssociation, id=id)
+    if not association.user == request.user:
+        raise Http404()
     request.user.message_set.create(message=_("You removed the association with %s") % association.provider)
     association.delete()
     return HttpResponseRedirect(reverse('user_authsettings'))