Block a user
Make available from external sources
User/Ticket changing/deletion via ui
Put EVERYTHING behind the login
Lock things behind admin