from rules.permissions import ObjectPermissionBackend from rowers.models import User class MyObjectPermissionBackend(ObjectPermissionBackend): def user_can_authenticate(self, user): return getattr(user, "is_active", True) def get_user(self, user_id): try: user = User.objects.get(pk=user_id) except User.DoesNotExist: return None return user if self.user_can_authenticate(user) else None