id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
17903	`ModelBackend.get_all_permissions` returns permissions for inactive users	Chris Beaven	jorgecarleitao	"The documentation states:
> Returns a set of permission strings that the user has, both through group and user permissions

Since `has_perm` returns `False` for an inactive user, I wouldn't think it should return an empty string.
The behaviour is not as explicitly stated as the other perm methods though, they say:
> If the user is inactive, this method will always return False.

r14797 changed `get_all_permissions` to return all strings for superusers, which seems to imply this should work the same way that has_perm does, not just provide a list of permission strings directly assigned (or via groups) to the user."	Bug	closed	contrib.auth	dev	Normal	fixed		jorgecarleitao	Accepted	1	0	0	1	0	0