Prevent purged users from logging in

Was possible if account was not deleted
nsoranzo · Oct 31, 2024 · f89c1d7 · f89c1d7
1 parent 0f06c9b
commit f89c1d7
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/lib/galaxy/webapps/galaxy/controllers/user.py b/lib/galaxy/webapps/galaxy/controllers/user.py
@@ -161,6 +161,9 @@ def __validate_login(self, trans, payload=None, **kwd):
             message, user = self.__autoregistration(trans, login, password)
             if message:
                 return self.message_exception(trans, message)
+        elif user.purged:
+            message = "This account has been permanently deleted."
+            return self.message_exception(trans, message, sanitize=False)
         elif user.deleted:
             message = (
                 "This account has been marked deleted, contact your local Galaxy administrator to restore the account."