I've repeatedly asked about this over the past couple of years and there seems to be no "right" answer." This, to me, is the biggest flaw in Django.
The official (and useless) answer is that you must pass "user" in everywhere you save anything. This is stupid, obviously, because you can not rewrite every third-party app to support this (among other reasons). There was a good tutorial for using threadlocals on the official Django wiki but someone deleted it in a fit of spite a few years ago. If you search for "audit user shawn milochik" in this Google Group (https://groups.google.com/forum/?hl=en&fromgroups=#!searchin/django-users/audit$20user$20shawn$20milochik) you'll get all the conversations I was involved in, which is, as far as I know, all of them over the past four years. The suggestion by Waldek Herka in one of those threads above works; I just tested it. If anyone knows of any reason why it's a bad idea I'd like to know. -- You received this message because you are subscribed to the Google Groups "Django users" group. To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscr...@googlegroups.com. To post to this group, send email to django-users@googlegroups.com. Visit this group at http://groups.google.com/group/django-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.