--- a/server/repository.py	Thu May 20 20:47:13 2010 +0200
+++ b/server/repository.py	Thu May 20 20:47:55 2010 +0200
@@ -407,7 +407,7 @@
             raise AuthenticationError('authentication failed with all sources')
         cwuser = self._build_user(session, eid)
         if self.config.consider_user_state and \
-               not cwuser.state in cwuser.AUTHENTICABLE_STATES:
+               not cwuser.cw_adapt_to('IWorkflowable').state in cwuser.AUTHENTICABLE_STATES:
             raise AuthenticationError('user is not in authenticable state')
         return cwuser