diff --git a/openedx/core/djangoapps/safe_sessions/middleware.py b/openedx/core/djangoapps/safe_sessions/middleware.py index a290745c4c..94ff67adef 100644 --- a/openedx/core/djangoapps/safe_sessions/middleware.py +++ b/openedx/core/djangoapps/safe_sessions/middleware.py @@ -368,6 +368,10 @@ class SafeSessionMiddleware(SessionMiddleware, MiddlewareMixin): given userid_in_session. """ if hasattr(request, 'safe_cookie_verified_user_id'): + if hasattr(request.user, 'real_user'): + # If a view overrode the request.user with a masqueraded user, this will + # revert/clean-up that change during response processing. + request.user = request.user.real_user if request.safe_cookie_verified_user_id != request.user.id: # The user at response time is expected to be None when the user # is logging out. To prevent extra noise in the logs,