id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
12113	contrib.auth documentation is misleading re: whether User.is_active matters for login	Ethan Jucovy	nobody	"The documentation at source:/django//trunk/docs/topics/auth.txt says
{{{
    .. attribute:: models.User.is_active

        Boolean. Designates whether this user account should be considered
	active. Set this flag to ``False`` instead of deleting accounts.

	This doesn't control whether or not the user can log in. Nothing in the
        authentication path checks the ``is_active`` flag, so if you want to
        reject a login based on ``is_active`` being ``False``, it is up to you
	to check that in your own login view. However, permission checking
        using the methods like :meth:`~models.User.has_perm` does check this
	flag and will always return ``False`` for inactive users.
}}}

""This doesn't control whether or not the user can log in.""

This is technically true, but misleading, because the default `AuthenticationForm` in django.contrib.auth *does* reject inactive users. This behavior is undocumented."		closed	Documentation	1.1		fixed			Ready for checkin	1	0	0	0	0	0