does user account validation work?

...moved this to the users list Hi! In my xwiki 0.9.840 installation I have set the user validation flag on but newly registered users can still log in without activating their accounts. So to say, if user is marked inactive (checked this in db too) he still can log in. I noticed this in xwiki.com too where I registered and directly logged in without "validating" my registration. Is this the intended behaviour for user account validation and if so, what is it actually for? If this is not a bug, what's the best way - if any - to disable a user account without removing it. Putting it into access denied -group? :pete