- assert that invalidated user cannot login

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@30883 20353a03-c40f-0410-a6d1-a30d3c3de9de

product/ERP5Security/tests/testERP5Security.py

@@ -333,6 +333,16 @@ class TestUserManagement(ERP5TypeTestCase):
 
     self._assertUserDoesNotExists('the_user', 'secret')
 
+  def test_InvalidatedPersonIsNotUser(self):
+    p = self._makePerson(reference='the_user', password='secret')
+    self._assertUserExists('the_user', 'secret')
+
+    p.validate()
+    p.invalidate()
+    transaction.commit()
+
+    self._assertUserDoesNotExists('the_user', 'secret')
+
 class TestLocalRoleManagement(ERP5TypeTestCase):
   """Tests Local Role Management with ERP5Security.