Mar 04 2026: added enable/disable user functions

app/models/user.py

@@ -10,16 +10,24 @@ def load_user(user_id):
 class User(UserMixin, db.Model):
     __tablename__ = 'users'
 
-    id = db.Column(db.Integer, primary_key=True)
-    username = db.Column(db.String(100), unique=True, nullable=False, index=True)
-    email = db.Column(db.String(255), unique=True, nullable=False, index=True)
+    id            = db.Column(db.Integer, primary_key=True)
+    username      = db.Column(db.String(100), unique=True, nullable=False, index=True)
+    email         = db.Column(db.String(255), unique=True, nullable=False, index=True)
     password_hash = db.Column(db.String(255), nullable=False)
-    role = db.Column(db.Enum('admin', 'supervisor', 'inspector'), nullable=False)
-    created_at = db.Column(db.DateTime, default=now_eastern)
+    role          = db.Column(db.Enum('admin', 'supervisor', 'inspector'), nullable=False)
+    created_at    = db.Column(db.DateTime, default=now_eastern)
+    active        = db.Column(db.Boolean, default=True, nullable=False)
 
     # Relationships
     inspections = db.relationship('Inspection', backref='inspector', lazy='dynamic')
 
+    # ── Flask-Login integration ────────────────────────────────────────────
+    # Override UserMixin.is_active so that disabled accounts are rejected
+    # automatically by login_required and login_user() without any extra code.
+    @property
+    def is_active(self):
+        return self.active
+
     def set_password(self, password):
         self.password_hash = generate_password_hash(password)
 
@@ -27,4 +35,4 @@ class User(UserMixin, db.Model):
         return check_password_hash(self.password_hash, password)
 
     def __repr__(self):
-        return f'<User {self.username}>'
+        return f'<User {self.username}>'