# HG changeset patch
# User Liad Shani <liadff@gmail.com>
# Date 2011-10-29 14:36:26
# Node ID 41696fc73c4dec46e361c2318f344e5473239cea
# Parent  6ece8795104a813f27c0c90ef277eff54c9d81fb

Fixed middleware to prevent deactivated users from authenticating

diff --git a/rhodecode/lib/middleware/simplegit.py b/rhodecode/lib/middleware/simplegit.py
--- a/rhodecode/lib/middleware/simplegit.py
+++ b/rhodecode/lib/middleware/simplegit.py
@@ -167,7 +167,7 @@ class SimpleGit(object):
                     username = get_container_username(environ, self.config)
                     try:
                         user = self.__get_user(username)
-                        if user is None:
+                        if user is None or not user.active:
                             return HTTPForbidden()(environ, start_response)                        
                         username = user.username
                     except:
diff --git a/rhodecode/lib/middleware/simplehg.py b/rhodecode/lib/middleware/simplehg.py
--- a/rhodecode/lib/middleware/simplehg.py
+++ b/rhodecode/lib/middleware/simplehg.py
@@ -133,7 +133,7 @@ class SimpleHg(object):
                     username = get_container_username(environ, self.config)
                     try:
                         user = self.__get_user(username)
-                        if user is None:
+                        if user is None or not user.active:
                             return HTTPForbidden()(environ, start_response)
                         username = user.username
                     except: