tree 44cdf01028619915a4f81bbc08c983a9a812e730
parent ac47c36385d4bc9efa36607ffbb797b3c8308302
author Luca Milanesio <luca.milanesio@gmail.com> 1589330784 +0100
committer Luca Milanesio <luca.milanesio@gmail.com> 1591374302 +0000

Deny access over HTTP for disabled accounts

When an account is disabled by the Gerrit admin through the set-account
command, it should not be enabled to perform any further authentication
or other actions.

Allowing a disabled account to continue operating in Gerrit until his
session expiration would be a security risk.

Bug: Issue 12717
Change-Id: I4cbad70bb3c83a1916f0d6939c5ccbbe7c734619