Hey there, new to all of this wiki stuff and I love
this emerging technology.
Well, to the point. I was experimenting
around on my own site and playing around with the user objects.
I do not think it is wise to allow newly registered
users to edit thier objects,
I registered a test user.
Went to his User Page,
edited the objects
and removed the XWiki.XWikiUser
object.
To me this had an interesting effect.
1) The user only would get challenged for a e-mail
address confirmation.
2) The user could not do anything (At least not
that i found yet) Yipee good security
3) The user did not show up on the administrator's
user list.
Although the first 2 are great, #3 to me is a
problem, unless there is another way of discovering this user?
Well, when I added the XWikiUsers object back all
of the user information was back (Though shouldn't it be purged when the class
is removed?)
Basically I am concerned with people creating
accounts, removing this Object and not comming back to my website because they
screwed up their account and I will only know if they take the time to e-mail
me.