Fix the UserOpenIDAdmin to set the permission on the user whose OpenID has just been updated, not the user making the request; Save a db query in authenticate by returning the UserOpenID from create_user_from_openid; Set user permissions in update_user_details.