add a disabled state to users

src/main/java/com/commafeed/backend/dao/GenericDAO.java

@@ -78,6 +78,20 @@ public abstract class GenericDAO<T, K> implements Serializable {
 		return criteria.getResultList();
 	}
 
+	public List<T> findAll(int startIndex, int count, String orderBy,
+			boolean asc) {
+		EasyCriteria<T> criteria = EasyCriteriaFactory.createQueryCriteria(em,
+				getType());
+		criteria.setMaxResults(count);
+		criteria.setFirstResult(startIndex);
+		if (asc) {
+			criteria.orderByAsc(orderBy);
+		} else {
+			criteria.orderByDesc(orderBy);
+		}
+		return criteria.getResultList();
+	}
+
 	public long getCount() {
 		CriteriaBuilder builder = em.getCriteriaBuilder();
 		CriteriaQuery<Long> query = builder.createQuery(Long.class);

src/main/java/com/commafeed/backend/dao/UserRoleService.java

@@ -1,20 +1,20 @@
 package com.commafeed.backend.dao;
 
-import java.util.List;
+import java.util.Set;
 
 import javax.ejb.Stateless;
 
 import com.commafeed.backend.model.User;
 import com.commafeed.backend.model.UserRole;
 import com.commafeed.frontend.utils.ModelFactory.MF;
-import com.google.common.collect.Lists;
+import com.google.common.collect.Sets;
 
 @SuppressWarnings("serial")
 @Stateless
 public class UserRoleService extends GenericDAO<UserRole, Long> {
 
-	public List<String> getRoles(User user) {
-		List<String> list = Lists.newArrayList();
+	public Set<String> getRoles(User user) {
+		Set<String> list = Sets.newHashSet();
 		for (UserRole role : findByField(MF.i(proxy().getUser()), user)) {
 			list.add(role.getRole());
 		}

src/main/java/com/commafeed/backend/dao/UserService.java

@@ -20,7 +20,7 @@ public class UserService extends GenericDAO<User, Long> {
 	public User login(String name, String password) {
 		List<User> users = findByField(MF.i(MF.p(User.class).getName()), name);
 		User user = Iterables.getFirst(users, null);
-		if (user != null) {
+		if (user != null && !user.isDisabled()) {
 			boolean authenticated = encryptionService.authenticate(password,
 					user.getPassword(), user.getSalt());
 			if (authenticated) {