From 1bea2e7da4704ca552dfc8e077f6359b47901600 Mon Sep 17 00:00:00 2001
From: Tom Gottfried <Tom Gottfried tom@intevation.de>
Date: Thu, 7 Sep 2017 11:05:47 +0200
Subject: [PATCH] Just a little bit of error handling.

---
 ringo/views/users.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/ringo/views/users.py b/ringo/views/users.py
index 5d7cac6d..40a1b59b 100644
--- a/ringo/views/users.py
+++ b/ringo/views/users.py
@@ -220,6 +220,8 @@ def setstandin(request, allowed_users=None):
             user_id = urlparse.urlparse(
                 request.GET.get('backurl')).path.split('/')[-1]
             user = request.db.query(User).get(user_id)
+            if not user:
+                raise HTTPBadRequest()
         # Otherwise the user sets the standin of his own group. In this
         # case the user is already in the request.
         else: