One solution is to remove all roles.
But the user will still be able to log in. Should we at the same time delete password?
Scenario:
Users "delete" their account and account is set to innactive in our system. 2 months later, the user want's to sign up again.
Since e-mail is already registered, he gets a message that the email exists.
What do we do now?
Well, if user request a new passord, he will get one. But he still doesn't have any user roles.
Doe anyone have any suggestions on how this may be solved?