From 939c7b214ed0732e2e4a6dbad2ddd6ac47cd93f7 Mon Sep 17 00:00:00 2001
From: feng <1304903146@qq.com>
Date: Wed, 11 Jun 2025 19:13:07 +0800
Subject: [PATCH] perf: Login to change password and filter out useless
 accounts

---
 apps/terminal/serializers/session.py | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/apps/terminal/serializers/session.py b/apps/terminal/serializers/session.py
index bde332261..0b01c36df 100644
--- a/apps/terminal/serializers/session.py
+++ b/apps/terminal/serializers/session.py
@@ -110,6 +110,13 @@ class SessionSerializer(BulkOrgResourceModelSerializer):
         except Account.DoesNotExist:
             logger.warning(f"Account with id {account_id} does not exist for change secret task.")
             return
+
+        if not account.secret_reset or not account.is_active:
+            logger.warning(
+                f"Account secret reset is not enabled or account is inactive: account={account}"
+            )
+            return
+
         acls = LoginAssetACL.filter_queryset(**kwargs)
         acl = LoginAssetACL.get_match_rule_acls(user, instance.remote_addr, acls)
         if not acl: