diff -r ac76925268a3 -r 48a6e6b88b16 server/session.py
--- a/server/session.py	Thu Apr 25 12:24:26 2013 +0200
+++ b/server/session.py	Mon Apr 22 17:57:46 2013 +0200
@@ -903,6 +903,7 @@
         return transaction(self, free_cnxset)
 
 
+    @deprecated('[3.17] do not use hijack_user. create new Session object')
     def hijack_user(self, user):
         """return a fake request/session using specified user"""
         session = Session(user, self.repo)