Hey there, new to all of this wiki stuff and I love this emerging technology.
 
Well, to the point. I was experimenting  around on my own site and playing around with the user objects.
 
I do not think it is wise to allow newly registered users to edit thier objects,
I registered a test user.
Went to his User Page,
edited the objects
and removed the XWiki.XWikiUser object.
 
To me this had an interesting effect.
1) The user only would get challenged for a e-mail address confirmation.
2) The user could not do anything (At least not that i found yet) Yipee good security
3) The user did not show up on the administrator's user list.
 
Although the first 2 are great,  #3 to me is a problem, unless there is another way of discovering this user?
 
Well, when I added the XWikiUsers object back all of the user information was back (Though shouldn't it be purged when the class is removed?)
 
 
Basically I am concerned with people creating accounts, removing this Object and not comming back to my website because they screwed up their account and I will only know if they take the time to e-mail me.