sebbacon/alaveteli — Issue #306: Don't change logged-in user from an admin when visiting a auto-login URL
Author: hsenag
Created: 2011-12-10 20:10:13+00:00
State: open

We send users emails containing URLs of the form http://www.whatdotheyknow.com/c/xxx which automatically log them into the site and take them to the relevant page.

Sometimes they reply to these emails which means admins need to follow the link to get the context for their email. This logs us in as that user instead of ourselves, which is usually unhelpful.

Perhaps just for admin accounts, if the user is already logged in to WDTK, then these URLs should not change who is logged in.

Sorry if this is already in the tracker, it's a bit hard to search for!