> How should I delete unwanted userid's ? I disable them but they can again > Login ;( If you disable a userid, a user can't log in with that account. If course he can create another account using a different name / email. If you have a real problem with that, you need closed usergroups, e.g. a EditorGroup and an ACL only allowing EditorGroup to edit.