@method_decorator(sensitive_post_parameters())
    def user_change_password(
            self, request, user_id, form_url=''):
        if not self.has_change_permission(
                request):
            raise PermissionDenied
        user = self.get_object(
            request, unquote(user_id))
        if user is None:
            raise Http404(
                '{name} object with primary key '
                '{key} does not exist.'.format(
                    name=force_text(
                        self.model
                        ._meta.verbose_name),
                    key=escape(user_id)))
        if request.method == 'POST':
            form = self.change_password_form(
                user, request.POST)
            if form.is_valid():
                form.save()
                change_message = (
                    self.construct_change_message(
                        request, form, None))
                self.log_change(
                    request, user, change_message)
                success(
                    request, 'Password changed.')
                update_session_auth_hash(
                    request, form.user)
                return HttpResponseRedirect('..')
        else:
            form = self.change_password_form(user)

        context = {
            'title': 'Change password: {}'.format(
                escape(user.get_username())),
            'form_url': form_url,
            'form': form,
            'is_popup': (
                request.POST in IS_POPUP_VAR
                or IS_POPUP_VAR in request.GET),
            'opts': self.model._meta,
            'original': user,
        }
        context.update(
            admin.site.each_context(request))

        request.current_app = self.admin_site.name

        return TemplateResponse(
            request,
            self.change_user_password_template,
            context)
dataset/ETHPy150Open jambonrose/DjangoUnleashed-1.8/user/admin.py/UserAdmin.user_change_password/swapped operands of `in`