django-hijack-admin

Django admin integration for Django Hijack (https://github.com/arteria/django-hijack/)

Installation

Follow the instructions on http://django-hijack.readthedocs.org/en/stable/#installation to install django-hijack.

Get the latest stable release from PyPi:

pip install django-hijack-admin

In your settings.py, add hijack_admin to your installed apps:

INSTALLED_APPS = (
    ...,
    'hijack_admin',
)

For the admin integration to work, you must explicitly set HIJACK_ALLOW_GET_REQUESTS = True in your project settings. Please be aware that users can now be hijacked not only using POST requests, but also using GET requests, which could facilitate CSRF attacks.

Configuration

HIJACK_BUTTON_TEMPLATE

Path to the template for the "Hijack" buttons. Default: 'hijack_admin/admin_button.html'

HIJACK_REGISTER_ADMIN

Whether the user model should be registered with HijackUserAdmin automatically. Default: True

HIJACK_USER_ADMIN_CLASS_NAME

Adds the possibility to configure the admin class name.

Custom user admins

Custom user admins are supported. Just set HIJACK_REGISTER_ADMIN = False and modify your custom admin class as shown in this example:

# admin.py
from hijack_admin.admin import HijackUserAdminMixin

class MyUserAdmin(UserAdmin, HijackUserAdminMixin):
    list_display = (
        ...
        'hijack_field',  # Hijack button
    )

Models with ForeignKey to User

You can also add the hijack field to a model that is related to the User model with the HijackRelatedAdminMixin.

#admin.py
from django.contrib import Admin
from hijack_admin.admin import HijackRelatedAdminMixin

class MyCustomerAdmin(HijackRelatedAdminMixin, admin.ModelAdmin)
    list_display = ('user', 'hijack_field')

Contributing

Anyone and everyone is welcome to contribute. Please take a moment to review the guidelines for contributing.