[Moin-user] disabled new user creation, but still find new accounts?

[Thomas]

R. Yu wrote:
> I'm using moin 1.5.7 as a personal CMS.  I've disabled new user creation by modifying userform.py,
> as described in the "clean solution" here:
> http://moinmo.in/FeatureRequests/DisableUserCreation
>
> The modification seemed to work:  if I tried to create a new user, I get a "new user accounts
> disabled" message and nothing is written to the user/data directory (which currently has write
> permission).
>
> However, whenever I check in my data/user directory after some period of time, I always find a
> bunch of new users in user/data--the user accounts are created, though the new users can't
> actually login.    I'm concerned that I've left a hole in my system for spammers, but for the life
> of me, I can't figure out how this happens.  Does anybody know how the new user accounts get
> created despite my changes to userform.py?
>   

Why not using an ACL on the UserPreferencs page?
Works work me :)