# What You Need to Know to Manage Users in Django Admin

DevFeed: [What You Need to Know to Manage Users in Django Admin](<https://devfeed.tech/articles/what-you-need-to-know-to-manage-users-in-django-admin-33945.md>)

Original publisher: [Read original article](<https://hakibenita.com/what-you-need-to-know-to-manage-users-in-django-admin>)

Author: Haki Benita

Published: 2019-08-04T21:00:00Z

Content type: tutorial

Language: en

Sources: [Haki Benita](<https://devfeed.tech/sources/haki-benita.md>)

Topics: [Django](<https://devfeed.tech/topics/django.md>), [Django Admin](<https://devfeed.tech/topics/django-admin.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [Users](<https://devfeed.tech/topics/users.md>)

Tags: [articles](<https://devfeed.tech/tags/articles.md>), [data](<https://devfeed.tech/tags/data.md>), [django](<https://devfeed.tech/tags/django.md>), [django-admin](<https://devfeed.tech/tags/django-admin.md>), [permissions](<https://devfeed.tech/tags/permissions.md>), [user](<https://devfeed.tech/tags/user.md>), [users](<https://devfeed.tech/tags/users.md>)

## AI overview

This article discusses how staff users in Django Admin can misuse permissive or misconfigured permissions on the user model, including potentially making themselves superusers. It presents ways to protect Django Admin and reduce the risk of human errors and data leaks.

## Source excerpt

Have you ever stopped to think what staff user can do in your Django admin site? Did you know staff users with misconfigured permissions on the user model can make themselves superusers? Permissive permissions to staff users can cause disastrous human errors at best, and lead to major data leaks and at worst.