Hello all,

I'm creating a site with public profiles which the client will moderate and activate as they come in. However I'm able to view a user's profile before that activation has taken place.

This is obviously not the right behaviour -- any thoughts on how to fix it? Is it just a case of overriding the view() method in /concrete/core/controllers/single_pages/profile.php to check for activation? This seems obvious but I'm worried I might have broken something elsewhere that's making this happen.

Any help appreciated :)