{"record":{"id":"99ac5745cc3d8f30","repo":"jellyfin/jellyfin","slug":"the-user-username-account-is-currently-disabled","errorCode":null,"errorMessage":"The {user.Username} account is currently disabled. Please consult with your administrator.","messagePattern":"The (.+?) account is currently disabled\\. Please consult with your administrator\\.","errorType":"exception","errorClass":"SecurityException","httpStatus":403,"severity":"error","filePath":"Jellyfin.Server.Implementations/Users/UserManager.cs","lineNumber":584,"sourceCode":"                    }\n                }\n\n                if (user is null)\n                {\n                    _logger.LogInformation(\n                        \"Authentication request for {UserName} has been denied (IP: {IP}).\",\n                        username,\n                        remoteEndPoint);\n                    throw new AuthenticationException(\"Invalid username or password entered.\");\n                }\n\n                if (user.HasPermission(PermissionKind.IsDisabled))\n                {\n                    _logger.LogInformation(\n                        \"Authentication request for {UserName} has been denied because this account is currently disabled (IP: {IP}).\",\n                        username,\n                        remoteEndPoint);\n                    throw new SecurityException(\n                        $\"The {user.Username} account is currently disabled. Please consult with your administrator.\");\n                }\n\n                if (!user.HasPermission(PermissionKind.EnableRemoteAccess) &&\n                    !_networkManager.IsInLocalNetwork(remoteEndPoint))\n                {\n                    _logger.LogInformation(\n                        \"Authentication request for {UserName} forbidden: remote access disabled and user not in local network (IP: {IP}).\",\n                        username,\n                        remoteEndPoint);\n                    throw new SecurityException(\"Forbidden.\");\n                }\n\n                if (!user.IsParentalScheduleAllowed())\n                {\n                    _logger.LogInformation(\n                        \"Authentication request for {UserName} is not allowed at this time due parental restrictions (IP: {IP}).\",\n                        username,","sourceCodeStart":566,"sourceCodeEnd":602,"githubUrl":"https://github.com/jellyfin/jellyfin/blob/ae8723026d97b6d0f926638803edef338919b794/Jellyfin.Server.Implementations/Users/UserManager.cs#L566-L602","documentation":"Thrown when a disabled account attempts login. Defensive fix: check the disabled flag before password verification order is fixed, return 403 with a neutral message, and audit-log the attempt; ensure disabled users' existing sessions/tokens are revoked.","triggerScenarios":"Thrown at Jellyfin.Server.Implementations/Users/UserManager.cs:584 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Have an administrator re-enable the account in Dashboard > Users.","Sign in with a different, enabled account."],"exampleFix":"user.SetPermission(PermissionKind.IsDisabled, false); await _userManager.UpdateUserAsync(user);","handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"ae8723026d97b6d0f926638803edef338919b794","analyzedAt":"2026-08-13T10:43:30.013Z","schemaVersion":2},"datasetVersion":"2026-08-13T14:17:21.547Z"}