From 81ecffa166fc62a1ff254e2508078012e044cc83 Mon Sep 17 00:00:00 2001
From: pycook <pycook@126.com>
Date: Wed, 11 Dec 2019 12:14:23 +0800
Subject: [PATCH] V2.0

---
 README.md         |  4 ++--
 api/models/acl.py | 12 ++++++------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/README.md b/README.md
index 8461963..3cb8bc7 100644
--- a/README.md
+++ b/README.md
@@ -14,8 +14,8 @@
 
 
 - 在线预览: [CMDB](http://121.42.12.46:8000)
-    - username: admin
-    - password: admin
+    - username: demo
+    - password: 123456
     
 > **重要提示**: `master` 分支在开发过程中可能处于 *不稳定的状态* 。
 请通过[releases](https://github.com/pycook/cmdb/releases)获取
diff --git a/api/models/acl.py b/api/models/acl.py
index 3388945..98eeae5 100644
--- a/api/models/acl.py
+++ b/api/models/acl.py
@@ -29,7 +29,7 @@ class UserQuery(BaseQuery):
 
     def authenticate(self, login, password):
         user = self.filter(db.or_(User.username == login,
-                                  User.email == login)).first()
+                                  User.email == login)).filter(User.deleted.is_(False)).first()
         if user:
             current_app.logger.info(user)
             authenticated = user.check_password(password)
@@ -39,7 +39,7 @@ class UserQuery(BaseQuery):
         return user, authenticated
 
     def authenticate_with_key(self, key, secret, args, path):
-        user = self.filter(User.key == key).filter(User.block == 0).first()
+        user = self.filter(User.key == key).filter(User.deleted.is_(False)).filter(User.block == 0).first()
         if not user:
             return None, False
         if user and hashlib.sha1('{0}{1}{2}'.format(
@@ -53,21 +53,21 @@ class UserQuery(BaseQuery):
     def search(self, key):
         query = self.filter(db.or_(User.email == key,
                                    User.nickname.ilike('%' + key + '%'),
-                                   User.username.ilike('%' + key + '%')))
+                                   User.username.ilike('%' + key + '%'))).filter(User.deleted.is_(False))
         return query
 
     def get_by_username(self, username):
-        user = self.filter(User.username == username).first()
+        user = self.filter(User.username == username).filter(User.deleted.is_(False)).first()
 
         return user
 
     def get_by_nickname(self, nickname):
-        user = self.filter(User.nickname == nickname).first()
+        user = self.filter(User.nickname == nickname).filter(User.deleted.is_(False)).first()
 
         return user
 
     def get(self, uid):
-        user = self.filter(User.uid == uid).first()
+        user = self.filter(User.uid == uid).filter(User.deleted.is_(False)).first()
 
         return copy.deepcopy(user)