One solution is to remove all roles.
But the user will still be able to log in. Should we at the same time delete password?
Users "delete" their account and account is set to innactive in our system. 2 months later, the user want's to sign up again.
Since e-mail is already registered, he gets a message that the email exists.
What do we do now?
Well, if user request a new passord, he will get one. But he still doesn't have any user roles.
Doe anyone have any suggestions on how this may be solved?