on3iro / cookiecutter-flask Goto Github PK

Whenever a user model inside flask admin is changed the password is overwritten. This obviously should only happen if the password has indeed been changed. Currently the on_form_prefill-method inside the UserView helps to avoid double hashing passwords. The emptied form field still gets posted to the database, though.

As far as I can see it there are currently two options to circumvent this behaviour:

Option 1

Get the actual password of the model currently being edited and write it to the database after the form has been changed.

Option 2

Create another view for password handling only and remove the password field from the UserView.