remove shortcut from admin app

diff --git a/ipf/admin/views.php b/ipf/admin/views.php
index 19a2b6bc0fa2014f74120852c292e8a98273111d..3955ab7a3f94376fc957bd2c7fc155d101241a46 100644 (file)
--- a/ipf/admin/views.php
+++ b/ipf/admin/views.php
@@ -312,7 +312,9 @@ function IPF_Admin_Views_Impersonate($request, $match)
         $success_url = IPF_HTTP_URL::urlForView('IPF_Admin_Views_Index');
 
     if (!$request->user->isAnonymous() && $request->user->is_superuser) {
-        $user = IPF_Shortcuts::GetObjectOr404('User', $match[1]);
+        $user = User::table()->findOneById($match[1]);
+        if (!$user)
+            return new IPF_HTTP_Response_NotFound($request);
         IPF_Auth_App::login($request, $user);
     }