Merge pull request #19094 from jdavcs/dev_purged_no_login

Prevent purged users from logging in
galaxyproject · Nov 5, 2024 · 3523f02 · 3523f02
2 parents 3150e23 + f89c1d7
commit 3523f02
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/lib/galaxy/webapps/galaxy/controllers/user.py b/lib/galaxy/webapps/galaxy/controllers/user.py
@@ -161,6 +161,9 @@ def __validate_login(self, trans, payload=None, **kwd):
             message, user = self.__autoregistration(trans, login, password)
             if message:
                 return self.message_exception(trans, message)
+        elif user.purged:
+            message = "This account has been permanently deleted."
+            return self.message_exception(trans, message, sanitize=False)
         elif user.deleted:
             message = (
                 "This account has been marked deleted, contact your local Galaxy administrator to restore the account."