diff --git a/tailbone/views/users.py b/tailbone/views/users.py index 46639179..fc395c62 100644 --- a/tailbone/views/users.py +++ b/tailbone/views/users.py @@ -175,13 +175,14 @@ class UsersView(MasterView): fs.roles, ]) if self.viewing: - del fs.password - del fs.confirm_password permissions = self.request.registry.settings.get('tailbone_permissions', {}) renderer = forms.renderers.PermissionsFieldRenderer(permissions, include_guest=True, include_authenticated=True) fs.append(formalchemy.Field('permissions', renderer=renderer)) + if self.viewing or self.deleting: + del fs.password + del fs.confirm_password class UserVersionView(VersionView):