Consider creating a User class and a UserState class or enum (better the latter). A User will have a UserState field, and depending on its value, will have different allowed behaviors.