title: Why doesn't ValidateUser return more?
body: <p>I'm using the standard .NET membership provider, and thought I'd see if someone could shine a light on it.</p>
  
  <p>Calling ValidateUser return either true or false. Now since the method accepts a username and password, one would reason that the return result would reflect an invalid username or password. Yet if we delve into it further, we find it is also checking IsLockedOut and IsApproved. </p>
  
  <pre><code>public override bool ValidateUser (string username, string password)
  {
      MembershipUser user = GetUser (username, false);
      /* if the user is locked out, return false immediately */
      if (user.IsLockedOut)
          return false;
      /* if the user is not yet approved, return false */
      if (!user.IsApproved)
          return false;
      ......
  </code></pre>
  
  <p>In my application, I would like to make use of IsApproved for my own means. Simply rolling my own provider won't work because I'm still constrained to a bool result. Creating a user gives us all the information we need, so why not ValidateUser? Am I missing something?</p>