You can use the SiteAccessRules group in site.ini. It's not in the standard site.ini but you can find an example in settings/siteaccess/demo/site.ini.append or settings/siteaccess/sdk/site.ini.append. Here you can specify which modules are allowed to run and which aren't, you can then disable the user module.
Module/view enabling/disabling is not supported yet.
Thank you, it worked.
SiteAccess is something that i still have some problems. Like URIMatch.... and so on. In sdk, is there [SitePrecheckRule], I didn't found anything about that in documentation, can you explain me what it is? Or documentation will shortly include that information.