in pulseapi/utility/userpermissions.py [0:0]
def set_user_permissions(backend, user, response, *args, **kwargs):
"""
This is a social-auth pipeline function for automatically
setting is_superuser permissions when a user logs in from a
known-to-be mozilla account.
"""
if user.email and is_staff_address(user.email) and user.is_staff is False:
user.is_staff = True
user.save()
add_user_to_main_site(user)
assign_group_policy(user, "staff")