Index: openacs-4/packages/acs-admin/www/users/modify-admin-privileges.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-admin/www/users/modify-admin-privileges.tcl,v
diff -u -N -r1.5 -r1.6
--- openacs-4/packages/acs-admin/www/users/modify-admin-privileges.tcl	13 Jun 2015 23:55:33 -0000	1.5
+++ openacs-4/packages/acs-admin/www/users/modify-admin-privileges.tcl	7 Aug 2017 23:47:45 -0000	1.6
@@ -5,21 +5,18 @@
     @cvs-id $Id$
 
 } {
-    user_id:naturalnum,notnull
-    action:notnull
-    confirmed_p:boolean,optional
+    user_id:naturalnum,notnull,verify
+    action:notnull,verify
+    {confirmed_p:boolean 0}
 }
 
-set confirmed_url "/acs-admin/users/modify-admin-privileges?user_id=$user_id&action=$action&confirmed_p=1"
+set confirmed_url [export_vars -base /acs-admin/users/modify-admin-privileges {
+    user_id:sign(max_age=60) action:sign {confirmed_p 1}
+}]
+set return_url [export_vars -base /acs-admin/users/one {user_id}]
 
-set return_url "/acs-admin/users/one?user_id=$user_id"
-
 set context [list [list "./" "Users"] "Modify privileges"]
 
-if {![info exists confirmed_p]} {
-    set confirmed_p 0
-}
-
 if {$confirmed_p} {
     if {"grant" eq $action} {
         permission::grant -object_id [acs_magic_object "security_context_root"] -party_id $user_id -privilege "admin"
@@ -33,3 +30,12 @@
     # this is expensive so maybe we should check if we in fact are cacheing.
     util_memoize_flush_regexp "^permission::.*-party_id $user_id"
 }
+
+acs_user::get -user_id $user_id -array user_info
+
+
+# Local variables:
+#    mode: tcl
+#    tcl-indent-level: 4
+#    indent-tabs-mode: nil
+# End: