[Erp5-report] r36437 lucas - /erp5/trunk/products/ERP5Security/ERP5UserManager.py

[nobody at svn.erp5.org]

Author: lucas
Date: Thu Jun 17 19:10:07 2010
New Revision: 36437

URL: http://svn.erp5.org?rev=36437&view=rev
Log:
Invalidated user should not be able to login.

Modified:
    erp5/trunk/products/ERP5Security/ERP5UserManager.py

Modified: erp5/trunk/products/ERP5Security/ERP5UserManager.py
URL: http://svn.erp5.org/erp5/trunk/products/ERP5Security/ERP5UserManager.py?rev=36437&r1=36436&r2=36437&view=diff
==============================================================================
--- erp5/trunk/products/ERP5Security/ERP5UserManager.py [utf8] (original)
+++ erp5/trunk/products/ERP5Security/ERP5UserManager.py [utf8] Thu Jun 17 19:10:07 2010
@@ -123,7 +123,7 @@ class ERP5UserManager(BasePlugin):
                 
               if pw_validate(user.getPassword(), password) and \
                      len(valid_assignment_list) and user \
-                     .getValidationState() != 'deleted': #user.getCareerRole() == 'internal':
+                     .getValidationState() not in ['deleted', 'invalidated']: #user.getCareerRole() == 'internal':
                 return login, login # use same for user_id and login
             finally:
               setSecurityManager(sm)