--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/gpp/core/middleware.py	Sat May 29 04:51:28 2010 +0000
@@ -0,0 +1,16 @@
+"""Common middleware for the entire project."""
+from django.contrib.auth import logout
+
+class InactiveUserMiddleware(object):
+    """
+    This middleware ensures users with is_active set to False get their
+    session destroyed and are treated as logged out.
+    This middleware should come after the 'django.contrib.auth.middleware.
+    AuthenticationMiddleware' in settings.py.
+    Idea taken from: http://djangosnippets.org/snippets/1105/
+    """
+
+    def process_request(self, request):
+        if request.user.is_authenticated() and not request.user.is_active:
+            logout(request)
+