code: def is_authorized_default(hijacker, hijacked):
      
  
      if hijacker.is_superuser:
          return True
  
      if hijacked.is_superuser:
          return False
  
      if hijacker.is_staff and hijack_settings.HIJACK_AUTHORIZE_STAFF:
          if hijacked.is_staff and not hijack_settings.HIJACK_AUTHORIZE_STAFF_TO_HIJACK_STAFF:
              return False
          return True
  
      return False
docs: Checks if the user has the correct permission to Hijack another user.
  
      By default only superusers are allowed to hijack.
  
      An exception is made to allow staff members to hijack when
      HIJACK_AUTHORIZE_STAFF is enabled in the Django settings.
  
      By default it prevents staff users from hijacking other staff users.
      This can be disabled by enabling the HIJACK_AUTHORIZE_STAFF_TO_HIJACK_STAFF
      setting in the Django settings.
  
      Staff users can never hijack superusers.