I'd like to draw attention to an open ticket which needs a design decision.
Description: "The login_required decorator is not checking User.is_active, as staff_member_required does. If an authenticated user is deactivated (via setting is_active to False), the user is still able to browse login_required-protected views." For probably most people, the expected and (most likely) wanted behavior would be not to let inactive users have access to login_required files. Wim -- You received this message because you are subscribed to the Google Groups "Django developers" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/django-developers?hl=en.
