Through admin, superusers can now "hijack" users and work as them

Author: Luke Tuite

bil_site/settings.py

@@ -85,6 +85,8 @@
     'django_filters',
     'bootstrap4',
     'django_pam',
+    'hijack',
+    'hijack.contrib.admin',
     #'core',
 ]
 
@@ -96,6 +98,7 @@
     'django.contrib.auth.middleware.AuthenticationMiddleware',
     'django.contrib.messages.middleware.MessageMiddleware',
     'django.middleware.clickjacking.XFrameOptionsMiddleware',
+    'hijack.middleware.HijackUserMiddleware',
 ]
 
 ROOT_URLCONF = 'bil_site.urls'

bil_site/urls.py

@@ -25,4 +25,5 @@
     path('admin/', admin.site.urls),
     path('accounts/', include('django.contrib.auth.urls')),
     path('', RedirectView.as_view(url='/ingest/')),
+    path('hijack/', include('hijack.urls')),
 ] + static(settings.STATIC_URL, document_root=settings.STATIC_ROOT)