[#1027] Disabled applications dropdown in 2factor admin

src/open_inwoner/conf/base.py

@@ -1027,6 +1027,9 @@
 #
 TWO_FACTOR_FORCE_OTP_ADMIN = config("TWO_FACTOR_FORCE_OTP_ADMIN", default=not DEBUG)
 TWO_FACTOR_PATCH_ADMIN = config("TWO_FACTOR_PATCH_ADMIN", default=True)
+ADMIN_INDEX_DISPLAY_DROP_DOWN_MENU_CONDITION_FUNCTION = (
+    "open_inwoner.utils.django_two_factor_auth.should_display_dropdown_menu"
+)
 
 # file upload limits
 MIN_UPLOAD_SIZE = 1  # in bytes

src/open_inwoner/utils/django_two_factor_auth.py

@@ -0,0 +1,19 @@
+from django.conf import settings
+
+from django_admin_index.utils import (
+    should_display_dropdown_menu as default_should_display_dropdown_menu,
+)
+
+
+def should_display_dropdown_menu(request) -> bool:
+    default = default_should_display_dropdown_menu(request)
+
+    two_factor_enabled = settings.TWO_FACTOR_PATCH_ADMIN
+    if not two_factor_enabled:
+        return default
+
+    # never display the dropdown in two-factor admin views
+    if request.resolver_match.view_name.startswith("admin:two_factor:"):
+        return False
+
+    return default and request.user.is_verified()