Forbid logins from disabled users.

[pithos] / src / gr / ebs / gss / server / webdav / login / GssWebDAVLoginModule.java

diff --git a/src/gr/ebs/gss/server/webdav/login/GssWebDAVLoginModule.java b/src/gr/ebs/gss/server/webdav/login/GssWebDAVLoginModule.java
index 5000912..0232c35 100644 (file)
--- a/src/gr/ebs/gss/server/webdav/login/GssWebDAVLoginModule.java
+++ b/src/gr/ebs/gss/server/webdav/login/GssWebDAVLoginModule.java
@@ -78,6 +78,7 @@ public class GssWebDAVLoginModule extends UsernamePasswordLoginModule {
                try {\r
                        final User user = getService().findUser(username);\r
                        if (user == null) throw new FailedLoginException("User '" + username + "' not found.");\r
+                       if (!user.isActive()) throw new FailedLoginException("User '" + username + "' is disabled.");\r
                        if (user.getWebDAVPassword() != null && user.getWebDAVPassword().length() > 0)\r
                                return user.getWebDAVPassword();\r
                        // If no password has ever been generated, use token instead\r