Ah, that makes sense then.


On Mon, Jul 8, 2013 at 7:55 AM, Cory Zue <notifications@github.com> wrote:

> In corehq/apps/hqadmin/views.py:
>
> > @@ -746,6 +748,21 @@ def app_filter(settings):
> >                       if app_filter(s)]
> >      return json_response(settings_list)
> >
> > +@require_superuser
> > +@require_GET
> > +def admin_restore(request):
> > +    full_username = request.GET.get('as', '')
> > +    if not full_username or '@' not in full_username:
> > +        return HttpResponseBadRequest('Please specify a user using ?as=user@domain')
>
> generally i don't worry about it for anything that is only
> dimagi/superuser facing though happy to add
>
> —
> Reply to this email directly or view it on GitHub<https://github.com/dimagi/commcare-hq/pull/598/files#r5062174>
> .
>