| Subject: | read-only user objects |
User objects created outside of the admin package should probably be
read-only. Currently all user objects have access to the save method.
Even if no real security is added to prevent any code using CAS from
accessing the admin package (when it exists), it would still be safer if
user objects could not be modified unless created explicitly for that
purpose.