dashboard: allow arbitrary GroupProfile.org_id values for admin

circle/dashboard/forms.py

@@ -359,14 +359,17 @@ class GroupProfileUpdateForm(forms.ModelForm):
 
     def __init__(self, *args, **kwargs):
         new_groups = kwargs.pop('new_groups', None)
+        superuser = kwargs.pop('superuser', False)
         super(GroupProfileUpdateForm, self).__init__(*args, **kwargs)
-        choices = [('', '--')]
-        if new_groups:
-            choices += [(g, g) for g in new_groups if len(g) <= 64]
-        self.fields['org_id'] = forms.ChoiceField(
-            choices=choices, required=False, label=_('Directory identifier'))
-        if not new_groups:
-            self.fields['org_id'].widget = HiddenInput()
+        if not superuser:
+            choices = [('', '--')]
+            if new_groups:
+                choices += [(g, g) for g in new_groups if len(g) <= 64]
+            self.fields['org_id'] = forms.ChoiceField(
+                choices=choices, required=False,
+                label=_('Directory identifier'))
+            if not new_groups:
+                self.fields['org_id'].widget = HiddenInput()
         self.fields['description'].widget = forms.Textarea(attrs={'rows': 3})
 
     @property

circle/dashboard/views.py

@@ -1646,6 +1646,7 @@ class GroupProfileUpdate(GroupCodeMixin, LoginRequiredMixin, UpdateView):
         kwargs['instance'] = instance
         kwargs['new_groups'] = cls.get_available_group_codes(
             request, instance.org_id)
+        kwargs['superuser'] = request.user.is_superuser
         return cls.form_class(*args, **kwargs)
 
     def get(self, request, form=None, *args, **kwargs):