I'm currently using DNN to build a site for a school. In this use-case only administrators will be handling the editing of user data (students). the users themselves should not be able to edit their profile or unregister from the site.

Is there any way to configure DNN to achieve this?

I know some people have chosen to edit the core source and turn off the display of the relevant links in order to hide them from users, but is this secure enough? If users have some knowledge of DNN, won't they be able to hack their way into the profile page or activate the unregister function without going through the links?