From 9aecb8b1913cb0b13c003dff6b2504ebad6427b9 Mon Sep 17 00:00:00 2001
From: Pierre-Yves Chibon <pingou@pingoured.fr>
Date: Mar 23 2015 09:10:56 +0000
Subject: Require a recent login to update the user's settings


---

diff --git a/progit/ui/app.py b/progit/ui/app.py
index 1e8afcf..920e540 100644
--- a/progit/ui/app.py
+++ b/progit/ui/app.py
@@ -296,6 +296,10 @@ def new_project():
 def user_settings():
     """ Update the user settings.
     """
+    if admin_session_timedout():
+        return flask.redirect(
+            flask.url_for('auth_login', next=flask.request.url))
+
     user = progit.lib.search_user(
         SESSION, username=flask.g.fas_user.username)
     if not user: