From 46043edb34710a1cc978f33982a1191534dcfadb Mon Sep 17 00:00:00 2001
From: hernani <hernani@0cfe37f9-358a-4d5e-be75-b63607b5c754>
Date: Thu, 29 Apr 2010 00:43:57 +0000
Subject: [PATCH] Fixing OSQA-197

git-svn-id: http://svn.osqa.net/svnroot/osqa/trunk@88 0cfe37f9-358a-4d5e-be75-b63607b5c754
---
 forum/views/auth.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/forum/views/auth.py b/forum/views/auth.py
index 9dafc41..4857b71 100644
--- a/forum/views/auth.py
+++ b/forum/views/auth.py
@@ -312,6 +312,8 @@ def auth_settings(request):
 
 def remove_external_provider(request, id):
     association = get_object_or_404(AuthKeyUserAssociation, id=id)
+    if not association.user == request.user:
+        raise Http404()
     request.user.message_set.create(message=_("You removed the association with %s") % association.provider)
     association.delete()
     return HttpResponseRedirect(reverse('user_authsettings'))
-- 
2.39.5