I'm using IP-based login to give visitors in a private network access to some parts of my Drupal 6 site. This means that all users from this private network are logged in as the same user.
Theoretically, anyone accessing the site that way could change the user password, which is something I don't really want to allow. I tried the User Protect module, but that just doesn't work at all on my site. I suspect that it is just incompatible with the IP login module.
Ideally, I'd like to hide the
/user page entirely from certain users. They shouldn't be able to access it and shouldn't be able to change their password or any other profile information.
How can I prevent access to the user profile?