Invalidated user should not be able to login.

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@36437 20353a03-c40f-0410-a6d1-a30d3c3de9de

product/ERP5Security/ERP5UserManager.py

@@ -123,7 +123,7 @@ class ERP5UserManager(BasePlugin):
                 
               if pw_validate(user.getPassword(), password) and \
                      len(valid_assignment_list) and user \
-                     .getValidationState() != 'deleted': #user.getCareerRole() == 'internal':
+                     .getValidationState() not in ['deleted', 'invalidated']: #user.getCareerRole() == 'internal':
                 return login, login # use same for user_id and login
             finally:
               setSecurityManager(sm)