admin confirmation after email confirmation about django-allauth

[pennersr]

You could listen to the email confirmed signal, and set is_active = False there. Though, be sure to only set that in case the account is a new one -- it might be that an already approved user verifies a secondary email address, in that case you don't want to toggle is_active.

[vdejager]

Clear, but is there any reason why the email confirmation is not send if the user 'is_active' is False? upon creation?

[pennersr]

The is_active field is not meant for what you are using it for, at the very least its semantics are fuzzy. I've seen people use it for the purposes you describe, but also for blocking bad behaving users. Django documents it as:

https://docs.djangoproject.com/en/5.0/ref/contrib/auth/: "We recommend that you set this flag to False instead of deleting accounts. That way, if your applications have any foreign keys to users, the foreign keys won’t break."

allauth uses the above semantics -- a deleted account is not supposed to perform any actions.