Users with a real lifecycle
Accounts move through clear states (pending, active, deactivated), gated by email activation. That’s a direct lesson from KD7, where I once found a deactivated user could reactivate themselves through a password reset. In KD8, the account lifecycle is designed in from the start instead of patched on later.
- Role-Based Access Control
- Laravel