diff --git a/com.woltlab.wcf/fileDelete.xml b/com.woltlab.wcf/fileDelete.xml
index b75e6e2cbe4..069f85ab847 100644
--- a/com.woltlab.wcf/fileDelete.xml
+++ b/com.woltlab.wcf/fileDelete.xml
@@ -572,5 +572,6 @@
 		<file>icon/font-awesome/v6/brands/yoast.svg</file>
 		<file>icon/font-awesome/v6/brands/youtube.svg</file>
 		<file>icon/font-awesome/v6/brands/zhihu.svg</file>
+		<file>js/WoltLabSuite/Core/Ui/User/Editor.js</file>
 	</delete>
 </data>
diff --git a/com.woltlab.wcf/templates/shared_standaloneInteractionButton.tpl b/com.woltlab.wcf/templates/shared_standaloneInteractionButton.tpl
index f673f251669..b7affbd2f13 100644
--- a/com.woltlab.wcf/templates/shared_standaloneInteractionButton.tpl
+++ b/com.woltlab.wcf/templates/shared_standaloneInteractionButton.tpl
@@ -22,7 +22,9 @@
 			'{unsafe:$providerClassName|encodeJS}',
 			'{unsafe:$objectID|encodeJS}',
 			'{unsafe:$redirectUrl|encodeJS}',
-			'{unsafe:$reloadHeaderEndpoint|encodeJS}'
+			'{unsafe:$reloadHeaderEndpoint|encodeJS}',
+			'{unsafe:$headerCssClassName|encodeJS}',
+			{if $reloadContextMenu}true{else}false{/if}
 		);
 	});
 </script>
diff --git a/com.woltlab.wcf/templates/user.tpl b/com.woltlab.wcf/templates/user.tpl
index 10684c4cd8e..2d3dfbd3a75 100644
--- a/com.woltlab.wcf/templates/user.tpl
+++ b/com.woltlab.wcf/templates/user.tpl
@@ -3,46 +3,6 @@
 {capture assign='headContent'}
 	{event name='javascriptInclude'}
 	<script data-relocate="true">
-		{if $__wcf->getUser()->userID && $__wcf->getUser()->userID != $user->userID}
-			require(['Language', 'WoltLabSuite/Core/Ui/User/Editor'], function(Language, UiUserEditor) {
-				Language.addObject({
-					'wcf.acp.user.disable': '{jslang}wcf.acp.user.disable{/jslang}',
-					'wcf.acp.user.enable': '{jslang}wcf.acp.user.enable{/jslang}',
-					'wcf.user.ban': '{jslang}wcf.user.ban{/jslang}',
-					'wcf.user.banned': '{jslang}wcf.user.banned{/jslang}',
-					'wcf.user.ban.confirmMessage': '{jslang}wcf.user.ban.confirmMessage{/jslang}',
-					'wcf.user.ban.expires': '{jslang}wcf.user.ban.expires{/jslang}',
-					'wcf.user.ban.expires.description': '{jslang}wcf.user.ban.expires.description{/jslang}',
-					'wcf.user.ban.neverExpires': '{jslang}wcf.user.ban.neverExpires{/jslang}',
-					'wcf.user.ban.reason.description': '{jslang}wcf.user.ban.reason.description{/jslang}',
-					'wcf.user.disableAvatar': '{jslang}wcf.user.disableAvatar{/jslang}',
-					'wcf.user.disableAvatar.confirmMessage': '{jslang}wcf.user.disableAvatar.confirmMessage{/jslang}',
-					'wcf.user.disableAvatar.expires': '{jslang}wcf.user.disableAvatar.expires{/jslang}',
-					'wcf.user.disableAvatar.expires.description': '{jslang}wcf.user.disableAvatar.expires.description{/jslang}',
-					'wcf.user.disableAvatar.neverExpires': '{jslang}wcf.user.disableAvatar.neverExpires{/jslang}',
-					'wcf.user.disableCoverPhoto': '{jslang}wcf.user.disableCoverPhoto{/jslang}',
-					'wcf.user.disableCoverPhoto.confirmMessage': '{jslang}wcf.user.disableCoverPhoto.confirmMessage{/jslang}',
-					'wcf.user.disableCoverPhoto.expires': '{jslang}wcf.user.disableCoverPhoto.expires{/jslang}',
-					'wcf.user.disableCoverPhoto.expires.description': '{jslang}wcf.user.disableCoverPhoto.expires.description{/jslang}',
-					'wcf.user.disableCoverPhoto.neverExpires': '{jslang}wcf.user.disableCoverPhoto.neverExpires{/jslang}',
-					'wcf.user.disableSignature': '{jslang}wcf.user.disableSignature{/jslang}',
-					'wcf.user.disableSignature.confirmMessage': '{jslang}wcf.user.disableSignature.confirmMessage{/jslang}',
-					'wcf.user.disableSignature.expires': '{jslang}wcf.user.disableSignature.expires{/jslang}',
-					'wcf.user.disableSignature.expires.description': '{jslang}wcf.user.disableSignature.expires.description{/jslang}',
-					'wcf.user.disableSignature.neverExpires': '{jslang}wcf.user.disableSignature.neverExpires{/jslang}',
-					'wcf.user.edit': '{jslang}wcf.user.edit{/jslang}',
-					'wcf.user.enableAvatar': '{jslang}wcf.user.enableAvatar{/jslang}',
-					'wcf.user.enableCoverPhoto': '{jslang}wcf.user.enableCoverPhoto{/jslang}',
-					'wcf.user.enableSignature': '{jslang}wcf.user.enableSignature{/jslang}',
-					'wcf.user.unban': '{jslang}wcf.user.unban{/jslang}'
-				});
-				
-				{if $isAccessible}
-					UiUserEditor.init();
-				{/if}
-			});
-		{/if}
-
 		$(function() {
 			{if $__wcf->getUser()->userID && $__wcf->getUser()->userID != $user->userID}
 				WCF.Language.addObject({
diff --git a/com.woltlab.wcf/templates/userProfileHeader.tpl b/com.woltlab.wcf/templates/userProfileHeader.tpl
index a37f894b004..d649ff1af03 100644
--- a/com.woltlab.wcf/templates/userProfileHeader.tpl
+++ b/com.woltlab.wcf/templates/userProfileHeader.tpl
@@ -1,24 +1,4 @@
-<header
-	class="userProfileHeader"
-	data-object-id="{$view->user->userID}"
-	{if $view->isInAccessibleGroup()}
-		{if $__wcf->session->getPermission('admin.user.canBanUser')}
-			data-banned="{$view->user->banned}"
-		{/if}
-		{if $__wcf->session->getPermission('admin.user.canDisableAvatar')}
-			data-disable-avatar="{$view->user->disableAvatar}"
-		{/if}
-		{if $__wcf->session->getPermission('admin.user.canDisableSignature')}
-			data-disable-signature="{$view->user->disableSignature}"
-		{/if}
-		{if $__wcf->session->getPermission('admin.user.canDisableCoverPhoto')}
-			data-disable-cover-photo="{$view->user->disableCoverPhoto}"
-		{/if}
-		{if $__wcf->session->getPermission('admin.user.canEnableUser')}
-			data-is-disabled="{if $view->user->activationCode}true{else}false{/if}"
-		{/if}
-	{/if}
->
+<header class="userProfileHeader" data-object-id="{$view->user->userID}">
 	<div class="userProfileHeader__coverPhotoContainer">
 		<div class="userProfileHeader__coverPhoto">
 			<img src="{$view->user->getCoverPhoto()->getURL()}" data-object-id="{$view->user->getCoverPhoto()->getObjectID()}" class="userProfileHeader__coverPhotoImage">
@@ -30,7 +10,7 @@
 			{if $view->canEditCoverPhoto()}
 				<ul class="userProfileManageCoverPhoto buttonGroup buttonList smallButtons">
 					<li>
-						<button type="button" data-edit-cover-photo="{link controller="UserCoverPhoto" id=$user->userID}{/link}" data-default-cover-photo="{$__wcf->styleHandler->getStyle()->getCoverPhotoUrl()}" class="button small">
+						<button type="button" data-edit-cover-photo="{link controller="UserCoverPhoto" id=$view->user->userID}{/link}" data-default-cover-photo="{$__wcf->styleHandler->getStyle()->getCoverPhotoUrl()}" class="button small">
 							{icon name='camera'}
 							<span>{lang}wcf.user.coverPhoto.edit{/lang}</span>
 						</button>
@@ -68,7 +48,7 @@
 			<h1 class="userProfileHeader__username">
 				<span class="userProfileUsername">{$view->user->username}</span>
 				{if $view->user->banned}
-					<span class="jsTooltip jsUserBanned" title="{lang}wcf.user.banned{/lang}">
+					<span class="jsTooltip jsUserBanned" title="{lang user=$view->user}wcf.user.banned{/lang}">
 						{icon name='lock'}
 					</span>
 				{/if}
@@ -108,13 +88,13 @@
 		<div class="userProfileHeader__buttons">
 			{event name='beforeButtons'}
 
-			{if $__wcf->user->userID && $user->userID != $__wcf->user->userID}
-				{if !$__wcf->getUserProfileHandler()->isIgnoredByUser($user->userID)}
-					{if $__wcf->getUserProfileHandler()->isFollowing($user->userID)}
+			{if $__wcf->user->userID && $view->user->userID != $__wcf->user->userID}
+				{if !$__wcf->getUserProfileHandler()->isIgnoredByUser($view->user->userID)}
+					{if $__wcf->getUserProfileHandler()->isFollowing($view->user->userID)}
 						<button
 							type="button"
 							data-following="1"
-							data-follow-user="{link controller='UserFollow' id=$user->userID}{/link}"
+							data-follow-user="{link controller='UserFollow' id=$view->user->userID}{/link}"
 							class="userProfileHeader__button button small jsTooltip"
 							title="{lang}wcf.user.button.unfollow{/lang}"
 						>{icon name='minus' type='solid'}</button>
@@ -122,7 +102,7 @@
 						<button
 							type="button"
 							data-following="0"
-							data-follow-user="{link controller='UserFollow' id=$user->userID}{/link}"
+							data-follow-user="{link controller='UserFollow' id=$view->user->userID}{/link}"
 							class="userProfileHeader__button button small jsTooltip"
 							title="{lang}wcf.user.button.follow{/lang}"
 						>{icon name='plus' type='solid'}</button>
@@ -164,9 +144,9 @@
 				{if $view->user->canViewOnlineStatus() && $view->user->getLastActivityTime()}
 					<dt>{icon name='clock'} {lang}wcf.user.usersOnline.lastActivity{/lang}</dt>
 					<dd>{time time=$view->user->getLastActivityTime()}</dd>
-					{if $user->getCurrentLocation()}
+					{if $view->user->getCurrentLocation()}
 						<dt>{icon name='location-arrow'} {lang}wcf.user.usersOnline.location{/lang}</dt>
-						<dd>{unsafe:$user->getCurrentLocation()}</dd>
+						<dd>{unsafe:$view->user->getCurrentLocation()}</dd>
 					{/if}
 				{/if}
 				{if $__wcf->session->getPermission('admin.user.canViewIpAddress') && $view->user->registrationIpAddress}
diff --git a/ts/WoltLabSuite/Core/Component/Interaction/StandaloneButton.ts b/ts/WoltLabSuite/Core/Component/Interaction/StandaloneButton.ts
index 5b2a4aa4a04..ef9f83e9295 100644
--- a/ts/WoltLabSuite/Core/Component/Interaction/StandaloneButton.ts
+++ b/ts/WoltLabSuite/Core/Component/Interaction/StandaloneButton.ts
@@ -10,6 +10,7 @@
 import { getObject } from "WoltLabSuite/Core/Api/GetObject";
 import { getContextMenuOptions } from "WoltLabSuite/Core/Api/Interactions/GetContextMenuOptions";
 import UiDropdownSimple from "WoltLabSuite/Core/Ui/Dropdown/Simple";
+import { insertHtml } from "WoltLabSuite/Core/Dom/Util";
 
 interface HeaderContent {
   template: string;
@@ -23,6 +24,8 @@ export class StandaloneButton {
   #objectId: string | number;
   #redirectUrl: string;
   #reloadHeaderEndpoint: string;
+  #headerCssClassName: string;
+  #reloadContextMenu: boolean;
 
   constructor(
     container: HTMLElement,
@@ -30,18 +33,26 @@ export class StandaloneButton {
     objectId: string | number,
     redirectUrl: string,
     reloadHeaderEndpoint: string,
+    headerCssClassName: string,
+    reloadContextMenu: boolean,
   ) {
     this.#container = container;
     this.#providerClassName = providerClassName;
     this.#objectId = objectId;
     this.#redirectUrl = redirectUrl;
     this.#reloadHeaderEndpoint = reloadHeaderEndpoint;
+    this.#headerCssClassName = headerCssClassName;
+    this.#reloadContextMenu = reloadContextMenu;
 
     this.#initInteractions();
     this.#initEventListeners();
   }
 
   async #refreshContextMenu(): Promise<void> {
+    if (!this.#reloadContextMenu) {
+      return;
+    }
+
     const { template } = await getContextMenuOptions(this.#providerClassName, this.#objectId);
 
     const dropdown = this.#getDropdownMenu();
@@ -55,11 +66,11 @@ export class StandaloneButton {
   }
 
   async #refreshHeader(): Promise<void> {
-    if (!this.#reloadHeaderEndpoint) {
+    if (!this.#reloadHeaderEndpoint || !this.#headerCssClassName) {
       return;
     }
 
-    const header = document.querySelector(".contentHeaderTitle");
+    const header = document.querySelector(`${this.#headerCssClassName}`);
     if (!header) {
       return;
     }
@@ -69,7 +80,8 @@ export class StandaloneButton {
       return;
     }
 
-    header.outerHTML = result.value.template;
+    insertHtml(result.value.template, header, "before");
+    header.remove();
   }
 
   #getDropdownMenu(): HTMLElement | undefined {
diff --git a/ts/WoltLabSuite/Core/Ui/User/Editor.ts b/ts/WoltLabSuite/Core/Ui/User/Editor.ts
deleted file mode 100644
index ef1644cd485..00000000000
--- a/ts/WoltLabSuite/Core/Ui/User/Editor.ts
+++ /dev/null
@@ -1,270 +0,0 @@
-/**
- * Simple notification overlay.
- *
- * @author  Alexander Ebert
- * @copyright  2001-2019 WoltLab GmbH
- * @license  GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
- * @woltlabExcludeBundle all
- */
-
-import * as Ajax from "../../Ajax";
-import { AjaxCallbackObject, AjaxCallbackSetup } from "../../Ajax/Data";
-import * as Core from "../../Core";
-import { DialogCallbackObject, DialogCallbackSetup } from "../Dialog/Data";
-import DomUtil from "../../Dom/Util";
-import * as Language from "../../Language";
-import * as StringUtil from "../../StringUtil";
-import UiDialog from "../Dialog";
-import { showDefaultSuccessSnackbar } from "WoltLabSuite/Core/Component/Snackbar";
-
-class UserEditor implements AjaxCallbackObject, DialogCallbackObject {
-  private actionName = "";
-  private readonly header: HTMLElement;
-
-  constructor() {
-    this.header = document.querySelector(".userProfileHeader") as HTMLElement;
-
-    ["ban", "disableAvatar", "disableCoverPhoto", "disableSignature", "enable"].forEach((action) => {
-      const button = document.querySelector(
-        ".userProfileHeader__managementOptions .jsButtonUser" + StringUtil.ucfirst(action),
-      ) as HTMLElement;
-
-      // The button is missing if the current user lacks the permission.
-      if (button) {
-        button.dataset.action = action;
-        button.addEventListener("click", (ev) => this._click(ev));
-      }
-    });
-  }
-
-  /**
-   * Handles clicks on action buttons.
-   */
-  _click(event: MouseEvent): void {
-    event.preventDefault();
-
-    const target = event.currentTarget as HTMLElement;
-    const action = target.dataset.action || "";
-    let actionName = "";
-    switch (action) {
-      case "ban":
-        if (Core.stringToBool(this.header.dataset.banned || "")) {
-          actionName = "unban";
-        }
-        break;
-
-      case "disableAvatar":
-        if (Core.stringToBool(this.header.dataset.disableAvatar || "")) {
-          actionName = "enableAvatar";
-        }
-        break;
-
-      case "disableCoverPhoto":
-        if (Core.stringToBool(this.header.dataset.disableCoverPhoto || "")) {
-          actionName = "enableCoverPhoto";
-        }
-        break;
-
-      case "disableSignature":
-        if (Core.stringToBool(this.header.dataset.disableSignature || "")) {
-          actionName = "enableSignature";
-        }
-        break;
-
-      case "enable":
-        actionName = Core.stringToBool(this.header.dataset.isDisabled || "") ? "enable" : "disable";
-        break;
-    }
-
-    if (actionName === "") {
-      this.actionName = action;
-
-      UiDialog.open(this);
-    } else {
-      Ajax.api(this, {
-        actionName: actionName,
-      });
-    }
-  }
-
-  /**
-   * Handles form submit and input validation.
-   */
-  _submit(event: Event): void {
-    event.preventDefault();
-
-    const label = document.getElementById("wcfUiUserEditorExpiresLabel") as HTMLElement;
-
-    let expires = "";
-    let errorMessage = "";
-    const neverExpires = document.getElementById("wcfUiUserEditorNeverExpires") as HTMLInputElement;
-    if (!neverExpires.checked) {
-      const expireValue = document.getElementById("wcfUiUserEditorExpiresDatePicker") as HTMLInputElement;
-      expires = expireValue.value;
-      if (expires === "") {
-        errorMessage = Language.get("wcf.global.form.error.empty");
-      }
-    }
-
-    DomUtil.innerError(label, errorMessage);
-
-    const parameters = {};
-    parameters[this.actionName + "Expires"] = expires;
-    const reason = document.getElementById("wcfUiUserEditorReason") as HTMLTextAreaElement;
-    parameters[this.actionName + "Reason"] = reason.value.trim();
-
-    Ajax.api(this, {
-      actionName: this.actionName,
-      parameters: parameters,
-    });
-  }
-
-  _ajaxSuccess(data): void {
-    let button: HTMLElement;
-    switch (data.actionName) {
-      case "ban":
-      case "unban": {
-        this.header.dataset.banned = data.actionName === "ban" ? "true" : "false";
-        button = document.querySelector(".userProfileHeader__managementOptions .jsButtonUserBan") as HTMLElement;
-        button.textContent = Language.get("wcf.user." + (data.actionName === "ban" ? "unban" : "ban"));
-
-        const contentTitle = this.header.querySelector(".userProfileHeader__username") as HTMLElement;
-        let banIcon = contentTitle.querySelector(".jsUserBanned") as HTMLElement;
-        if (data.actionName === "ban") {
-          banIcon = document.createElement("span");
-          banIcon.innerHTML = '<fa-icon size="16" name="lock"></fa-icon>';
-          banIcon.classList.add("jsUserBanned", "jsTooltip");
-          banIcon.title = data.returnValues;
-          contentTitle.appendChild(banIcon);
-        } else if (banIcon) {
-          banIcon.remove();
-        }
-        break;
-      }
-
-      case "disableAvatar":
-      case "enableAvatar":
-        this.header.dataset.disableAvatar = data.actionName === "disableAvatar" ? "true" : "false";
-        button = document.querySelector(
-          ".userProfileHeader__managementOptions .jsButtonUserDisableAvatar",
-        ) as HTMLElement;
-        button.textContent = Language.get(
-          "wcf.user." + (data.actionName === "disableAvatar" ? "enable" : "disable") + "Avatar",
-        );
-        break;
-
-      case "disableCoverPhoto":
-      case "enableCoverPhoto":
-        this.header.dataset.disableCoverPhoto = data.actionName === "disableCoverPhoto" ? "true" : "false";
-        button = document.querySelector(
-          ".userProfileHeader__managementOptions .jsButtonUserDisableCoverPhoto",
-        ) as HTMLElement;
-        button.textContent = Language.get(
-          "wcf.user." + (data.actionName === "disableCoverPhoto" ? "enable" : "disable") + "CoverPhoto",
-        );
-        break;
-
-      case "disableSignature":
-      case "enableSignature":
-        this.header.dataset.disableSignature = data.actionName === "disableSignature" ? "true" : "false";
-        button = document.querySelector(
-          ".userProfileHeader__managementOptions .jsButtonUserDisableSignature",
-        ) as HTMLElement;
-        button.textContent = Language.get(
-          "wcf.user." + (data.actionName === "disableSignature" ? "enable" : "disable") + "Signature",
-        );
-        break;
-
-      case "enable":
-      case "disable":
-        this.header.dataset.isDisabled = data.actionName === "disable" ? "true" : "false";
-        button = document.querySelector(".userProfileHeader__managementOptions .jsButtonUserEnable") as HTMLElement;
-        button.textContent = Language.get("wcf.acp.user." + (data.actionName === "enable" ? "disable" : "enable"));
-        break;
-    }
-
-    if (["ban", "disableAvatar", "disableCoverPhoto", "disableSignature"].indexOf(data.actionName) !== -1) {
-      UiDialog.close(this);
-    }
-
-    showDefaultSuccessSnackbar();
-  }
-
-  _ajaxSetup(): ReturnType<AjaxCallbackSetup> {
-    return {
-      data: {
-        className: "wcf\\data\\user\\UserAction",
-        objectIDs: [+this.header.dataset.objectId!],
-      },
-    };
-  }
-
-  _dialogSetup(): ReturnType<DialogCallbackSetup> {
-    return {
-      id: "wcfUiUserEditor",
-      options: {
-        onSetup: (content) => {
-          const checkbox = document.getElementById("wcfUiUserEditorNeverExpires") as HTMLInputElement;
-          checkbox.addEventListener("change", () => {
-            const settings = document.getElementById("wcfUiUserEditorExpiresSettings") as HTMLElement;
-            DomUtil[checkbox.checked ? "hide" : "show"](settings);
-          });
-
-          const submitButton = content.querySelector("button.buttonPrimary") as HTMLButtonElement;
-          submitButton.addEventListener("click", this._submit.bind(this));
-        },
-        onShow: (content) => {
-          UiDialog.setTitle("wcfUiUserEditor", Language.get("wcf.user." + this.actionName + ".confirmMessage"));
-
-          const reason = document.getElementById("wcfUiUserEditorReason") as HTMLElement;
-          let label = reason.nextElementSibling as HTMLElement;
-          const phrase = "wcf.user." + this.actionName + ".reason.description";
-          label.textContent = Language.get(phrase);
-          if (label.textContent === phrase) {
-            DomUtil.hide(label);
-          } else {
-            DomUtil.show(label);
-          }
-
-          label = document.getElementById("wcfUiUserEditorNeverExpires")!.nextElementSibling as HTMLElement;
-          label.textContent = Language.get("wcf.user." + this.actionName + ".neverExpires");
-
-          label = content.querySelector('label[for="wcfUiUserEditorExpires"]') as HTMLElement;
-          label.textContent = Language.get("wcf.user." + this.actionName + ".expires");
-
-          label = document.getElementById("wcfUiUserEditorExpiresLabel") as HTMLElement;
-          label.textContent = Language.get("wcf.user." + this.actionName + ".expires.description");
-        },
-      },
-      source: `<div class="section">
-        <dl>
-          <dt><label for="wcfUiUserEditorReason">${Language.get("wcf.global.reason")}</label></dt>
-          <dd><textarea id="wcfUiUserEditorReason" cols="40" rows="3"></textarea><small></small></dd>
-        </dl>
-        <dl>
-          <dt></dt>
-          <dd><label><input type="checkbox" id="wcfUiUserEditorNeverExpires" checked> <span></span></label></dd>
-        </dl>
-        <dl id="wcfUiUserEditorExpiresSettings" style="display: none">
-          <dt><label for="wcfUiUserEditorExpires"></label></dt>
-          <dd>
-            <input type="date" name="wcfUiUserEditorExpires" id="wcfUiUserEditorExpires" class="medium" min="${new Date(
-              window.TIME_NOW * 1000,
-            ).toISOString()}" data-ignore-timezone="true">
-            <small id="wcfUiUserEditorExpiresLabel"></small>
-          </dd>
-        </dl>
-      </div>
-      <div class="formSubmit">
-        <button type="button" class="button buttonPrimary">${Language.get("wcf.global.button.submit")}</button>
-      </div>`,
-    };
-  }
-}
-
-/**
- * Initializes the user editor.
- */
-export function init(): void {
-  new UserEditor();
-}
diff --git a/wcfsetup/install/files/js/WoltLabSuite/Core/Component/Interaction/StandaloneButton.js b/wcfsetup/install/files/js/WoltLabSuite/Core/Component/Interaction/StandaloneButton.js
index ae76832889c..0e43dfbf70e 100644
--- a/wcfsetup/install/files/js/WoltLabSuite/Core/Component/Interaction/StandaloneButton.js
+++ b/wcfsetup/install/files/js/WoltLabSuite/Core/Component/Interaction/StandaloneButton.js
@@ -6,7 +6,7 @@
  * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
  * @since 6.2
  */
-define(["require", "exports", "tslib", "WoltLabSuite/Core/Api/GetObject", "WoltLabSuite/Core/Api/Interactions/GetContextMenuOptions", "WoltLabSuite/Core/Ui/Dropdown/Simple"], function (require, exports, tslib_1, GetObject_1, GetContextMenuOptions_1, Simple_1) {
+define(["require", "exports", "tslib", "WoltLabSuite/Core/Api/GetObject", "WoltLabSuite/Core/Api/Interactions/GetContextMenuOptions", "WoltLabSuite/Core/Ui/Dropdown/Simple", "WoltLabSuite/Core/Dom/Util"], function (require, exports, tslib_1, GetObject_1, GetContextMenuOptions_1, Simple_1, Util_1) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.StandaloneButton = void 0;
@@ -17,16 +17,23 @@ define(["require", "exports", "tslib", "WoltLabSuite/Core/Api/GetObject", "WoltL
         #objectId;
         #redirectUrl;
         #reloadHeaderEndpoint;
-        constructor(container, providerClassName, objectId, redirectUrl, reloadHeaderEndpoint) {
+        #headerCssClassName;
+        #reloadContextMenu;
+        constructor(container, providerClassName, objectId, redirectUrl, reloadHeaderEndpoint, headerCssClassName, reloadContextMenu) {
             this.#container = container;
             this.#providerClassName = providerClassName;
             this.#objectId = objectId;
             this.#redirectUrl = redirectUrl;
             this.#reloadHeaderEndpoint = reloadHeaderEndpoint;
+            this.#headerCssClassName = headerCssClassName;
+            this.#reloadContextMenu = reloadContextMenu;
             this.#initInteractions();
             this.#initEventListeners();
         }
         async #refreshContextMenu() {
+            if (!this.#reloadContextMenu) {
+                return;
+            }
             const { template } = await (0, GetContextMenuOptions_1.getContextMenuOptions)(this.#providerClassName, this.#objectId);
             const dropdown = this.#getDropdownMenu();
             if (!dropdown) {
@@ -36,10 +43,10 @@ define(["require", "exports", "tslib", "WoltLabSuite/Core/Api/GetObject", "WoltL
             this.#initInteractions();
         }
         async #refreshHeader() {
-            if (!this.#reloadHeaderEndpoint) {
+            if (!this.#reloadHeaderEndpoint || !this.#headerCssClassName) {
                 return;
             }
-            const header = document.querySelector(".contentHeaderTitle");
+            const header = document.querySelector(`${this.#headerCssClassName}`);
             if (!header) {
                 return;
             }
@@ -47,7 +54,8 @@ define(["require", "exports", "tslib", "WoltLabSuite/Core/Api/GetObject", "WoltL
             if (!result.ok) {
                 return;
             }
-            header.outerHTML = result.value.template;
+            (0, Util_1.insertHtml)(result.value.template, header, "before");
+            header.remove();
         }
         #getDropdownMenu() {
             const button = this.#container.querySelector(".dropdownToggle");
diff --git a/wcfsetup/install/files/js/WoltLabSuite/Core/Ui/User/Editor.js b/wcfsetup/install/files/js/WoltLabSuite/Core/Ui/User/Editor.js
deleted file mode 100644
index f4574ce1566..00000000000
--- a/wcfsetup/install/files/js/WoltLabSuite/Core/Ui/User/Editor.js
+++ /dev/null
@@ -1,224 +0,0 @@
-/**
- * Simple notification overlay.
- *
- * @author  Alexander Ebert
- * @copyright  2001-2019 WoltLab GmbH
- * @license  GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
- * @woltlabExcludeBundle all
- */
-define(["require", "exports", "tslib", "../../Ajax", "../../Core", "../../Dom/Util", "../../Language", "../../StringUtil", "../Dialog", "WoltLabSuite/Core/Component/Snackbar"], function (require, exports, tslib_1, Ajax, Core, Util_1, Language, StringUtil, Dialog_1, Snackbar_1) {
-    "use strict";
-    Object.defineProperty(exports, "__esModule", { value: true });
-    exports.init = init;
-    Ajax = tslib_1.__importStar(Ajax);
-    Core = tslib_1.__importStar(Core);
-    Util_1 = tslib_1.__importDefault(Util_1);
-    Language = tslib_1.__importStar(Language);
-    StringUtil = tslib_1.__importStar(StringUtil);
-    Dialog_1 = tslib_1.__importDefault(Dialog_1);
-    class UserEditor {
-        actionName = "";
-        header;
-        constructor() {
-            this.header = document.querySelector(".userProfileHeader");
-            ["ban", "disableAvatar", "disableCoverPhoto", "disableSignature", "enable"].forEach((action) => {
-                const button = document.querySelector(".userProfileHeader__managementOptions .jsButtonUser" + StringUtil.ucfirst(action));
-                // The button is missing if the current user lacks the permission.
-                if (button) {
-                    button.dataset.action = action;
-                    button.addEventListener("click", (ev) => this._click(ev));
-                }
-            });
-        }
-        /**
-         * Handles clicks on action buttons.
-         */
-        _click(event) {
-            event.preventDefault();
-            const target = event.currentTarget;
-            const action = target.dataset.action || "";
-            let actionName = "";
-            switch (action) {
-                case "ban":
-                    if (Core.stringToBool(this.header.dataset.banned || "")) {
-                        actionName = "unban";
-                    }
-                    break;
-                case "disableAvatar":
-                    if (Core.stringToBool(this.header.dataset.disableAvatar || "")) {
-                        actionName = "enableAvatar";
-                    }
-                    break;
-                case "disableCoverPhoto":
-                    if (Core.stringToBool(this.header.dataset.disableCoverPhoto || "")) {
-                        actionName = "enableCoverPhoto";
-                    }
-                    break;
-                case "disableSignature":
-                    if (Core.stringToBool(this.header.dataset.disableSignature || "")) {
-                        actionName = "enableSignature";
-                    }
-                    break;
-                case "enable":
-                    actionName = Core.stringToBool(this.header.dataset.isDisabled || "") ? "enable" : "disable";
-                    break;
-            }
-            if (actionName === "") {
-                this.actionName = action;
-                Dialog_1.default.open(this);
-            }
-            else {
-                Ajax.api(this, {
-                    actionName: actionName,
-                });
-            }
-        }
-        /**
-         * Handles form submit and input validation.
-         */
-        _submit(event) {
-            event.preventDefault();
-            const label = document.getElementById("wcfUiUserEditorExpiresLabel");
-            let expires = "";
-            let errorMessage = "";
-            const neverExpires = document.getElementById("wcfUiUserEditorNeverExpires");
-            if (!neverExpires.checked) {
-                const expireValue = document.getElementById("wcfUiUserEditorExpiresDatePicker");
-                expires = expireValue.value;
-                if (expires === "") {
-                    errorMessage = Language.get("wcf.global.form.error.empty");
-                }
-            }
-            Util_1.default.innerError(label, errorMessage);
-            const parameters = {};
-            parameters[this.actionName + "Expires"] = expires;
-            const reason = document.getElementById("wcfUiUserEditorReason");
-            parameters[this.actionName + "Reason"] = reason.value.trim();
-            Ajax.api(this, {
-                actionName: this.actionName,
-                parameters: parameters,
-            });
-        }
-        _ajaxSuccess(data) {
-            let button;
-            switch (data.actionName) {
-                case "ban":
-                case "unban": {
-                    this.header.dataset.banned = data.actionName === "ban" ? "true" : "false";
-                    button = document.querySelector(".userProfileHeader__managementOptions .jsButtonUserBan");
-                    button.textContent = Language.get("wcf.user." + (data.actionName === "ban" ? "unban" : "ban"));
-                    const contentTitle = this.header.querySelector(".userProfileHeader__username");
-                    let banIcon = contentTitle.querySelector(".jsUserBanned");
-                    if (data.actionName === "ban") {
-                        banIcon = document.createElement("span");
-                        banIcon.innerHTML = '<fa-icon size="16" name="lock"></fa-icon>';
-                        banIcon.classList.add("jsUserBanned", "jsTooltip");
-                        banIcon.title = data.returnValues;
-                        contentTitle.appendChild(banIcon);
-                    }
-                    else if (banIcon) {
-                        banIcon.remove();
-                    }
-                    break;
-                }
-                case "disableAvatar":
-                case "enableAvatar":
-                    this.header.dataset.disableAvatar = data.actionName === "disableAvatar" ? "true" : "false";
-                    button = document.querySelector(".userProfileHeader__managementOptions .jsButtonUserDisableAvatar");
-                    button.textContent = Language.get("wcf.user." + (data.actionName === "disableAvatar" ? "enable" : "disable") + "Avatar");
-                    break;
-                case "disableCoverPhoto":
-                case "enableCoverPhoto":
-                    this.header.dataset.disableCoverPhoto = data.actionName === "disableCoverPhoto" ? "true" : "false";
-                    button = document.querySelector(".userProfileHeader__managementOptions .jsButtonUserDisableCoverPhoto");
-                    button.textContent = Language.get("wcf.user." + (data.actionName === "disableCoverPhoto" ? "enable" : "disable") + "CoverPhoto");
-                    break;
-                case "disableSignature":
-                case "enableSignature":
-                    this.header.dataset.disableSignature = data.actionName === "disableSignature" ? "true" : "false";
-                    button = document.querySelector(".userProfileHeader__managementOptions .jsButtonUserDisableSignature");
-                    button.textContent = Language.get("wcf.user." + (data.actionName === "disableSignature" ? "enable" : "disable") + "Signature");
-                    break;
-                case "enable":
-                case "disable":
-                    this.header.dataset.isDisabled = data.actionName === "disable" ? "true" : "false";
-                    button = document.querySelector(".userProfileHeader__managementOptions .jsButtonUserEnable");
-                    button.textContent = Language.get("wcf.acp.user." + (data.actionName === "enable" ? "disable" : "enable"));
-                    break;
-            }
-            if (["ban", "disableAvatar", "disableCoverPhoto", "disableSignature"].indexOf(data.actionName) !== -1) {
-                Dialog_1.default.close(this);
-            }
-            (0, Snackbar_1.showDefaultSuccessSnackbar)();
-        }
-        _ajaxSetup() {
-            return {
-                data: {
-                    className: "wcf\\data\\user\\UserAction",
-                    objectIDs: [+this.header.dataset.objectId],
-                },
-            };
-        }
-        _dialogSetup() {
-            return {
-                id: "wcfUiUserEditor",
-                options: {
-                    onSetup: (content) => {
-                        const checkbox = document.getElementById("wcfUiUserEditorNeverExpires");
-                        checkbox.addEventListener("change", () => {
-                            const settings = document.getElementById("wcfUiUserEditorExpiresSettings");
-                            Util_1.default[checkbox.checked ? "hide" : "show"](settings);
-                        });
-                        const submitButton = content.querySelector("button.buttonPrimary");
-                        submitButton.addEventListener("click", this._submit.bind(this));
-                    },
-                    onShow: (content) => {
-                        Dialog_1.default.setTitle("wcfUiUserEditor", Language.get("wcf.user." + this.actionName + ".confirmMessage"));
-                        const reason = document.getElementById("wcfUiUserEditorReason");
-                        let label = reason.nextElementSibling;
-                        const phrase = "wcf.user." + this.actionName + ".reason.description";
-                        label.textContent = Language.get(phrase);
-                        if (label.textContent === phrase) {
-                            Util_1.default.hide(label);
-                        }
-                        else {
-                            Util_1.default.show(label);
-                        }
-                        label = document.getElementById("wcfUiUserEditorNeverExpires").nextElementSibling;
-                        label.textContent = Language.get("wcf.user." + this.actionName + ".neverExpires");
-                        label = content.querySelector('label[for="wcfUiUserEditorExpires"]');
-                        label.textContent = Language.get("wcf.user." + this.actionName + ".expires");
-                        label = document.getElementById("wcfUiUserEditorExpiresLabel");
-                        label.textContent = Language.get("wcf.user." + this.actionName + ".expires.description");
-                    },
-                },
-                source: `<div class="section">
-        <dl>
-          <dt><label for="wcfUiUserEditorReason">${Language.get("wcf.global.reason")}</label></dt>
-          <dd><textarea id="wcfUiUserEditorReason" cols="40" rows="3"></textarea><small></small></dd>
-        </dl>
-        <dl>
-          <dt></dt>
-          <dd><label><input type="checkbox" id="wcfUiUserEditorNeverExpires" checked> <span></span></label></dd>
-        </dl>
-        <dl id="wcfUiUserEditorExpiresSettings" style="display: none">
-          <dt><label for="wcfUiUserEditorExpires"></label></dt>
-          <dd>
-            <input type="date" name="wcfUiUserEditorExpires" id="wcfUiUserEditorExpires" class="medium" min="${new Date(window.TIME_NOW * 1000).toISOString()}" data-ignore-timezone="true">
-            <small id="wcfUiUserEditorExpiresLabel"></small>
-          </dd>
-        </dl>
-      </div>
-      <div class="formSubmit">
-        <button type="button" class="button buttonPrimary">${Language.get("wcf.global.button.submit")}</button>
-      </div>`,
-            };
-        }
-    }
-    /**
-     * Initializes the user editor.
-     */
-    function init() {
-        new UserEditor();
-    }
-});
diff --git a/wcfsetup/install/files/lib/action/UserBanAction.class.php b/wcfsetup/install/files/lib/action/UserBanAction.class.php
new file mode 100644
index 00000000000..116fa6846e5
--- /dev/null
+++ b/wcfsetup/install/files/lib/action/UserBanAction.class.php
@@ -0,0 +1,84 @@
+<?php
+
+namespace wcf\action;
+
+use wcf\command\user\BanUser;
+use wcf\data\user\UserProfile;
+use wcf\system\exception\IllegalLinkException;
+use wcf\system\exception\PermissionDeniedException;
+use wcf\system\form\builder\field\BooleanFormField;
+use wcf\system\form\builder\field\DateFormField;
+use wcf\system\form\builder\field\dependency\EmptyFormFieldDependency;
+use wcf\system\form\builder\field\MultilineTextFormField;
+use wcf\system\form\builder\Psr15DialogForm;
+use wcf\system\WCF;
+
+/**
+ * Handles ban a user.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class UserBanAction extends UserManagementAction
+{
+    #[\Override]
+    protected function performAction(UserProfile $userProfile, array $data): void
+    {
+        $reason = $data['reason'];
+        if ($data['neverExpires']) {
+            $expires = 0;
+        } else {
+            $expires = $data['expires'];
+        }
+
+        (new BanUser($userProfile->getDecoratedObject(), $reason, $expires))();
+    }
+
+    #[\Override]
+    protected function assertUserCanBeManaged(UserProfile $userProfile): void
+    {
+        parent::assertUserCanBeManaged($userProfile);
+
+        if (!WCF::getSession()->getPermission('admin.user.canBanUser')) {
+            throw new PermissionDeniedException();
+        }
+
+        if ($userProfile->banned !== 0) {
+            throw new IllegalLinkException();
+        }
+    }
+
+    #[\Override]
+    protected function getForm(): Psr15DialogForm
+    {
+        $form = new Psr15DialogForm(
+            static::class,
+            WCF::getLanguage()->getDynamicVariable('wcf.user.ban.confirmMessage')
+        );
+        $form->appendChildren([
+            MultilineTextFormField::create('reason')
+                ->rows(3)
+                ->label('wcf.global.reason')
+                ->description('wcf.user.ban.reason.description'),
+            BooleanFormField::create('neverExpires')
+                ->label('wcf.user.ban.neverExpires')
+                ->value(true),
+            DateFormField::create('expires')
+                ->label('wcf.user.ban.expires')
+                ->description('wcf.user.ban.expires.description')
+                ->earliestDate(TIME_NOW)
+                ->required()
+                ->addDependency(
+                    EmptyFormFieldDependency::create('neverExpires')
+                        ->fieldId('neverExpires')
+                ),
+        ]);
+
+        $form->markRequiredFields(false);
+        $form->build();
+
+        return $form;
+    }
+}
diff --git a/wcfsetup/install/files/lib/action/UserDisableAvatarAction.class.php b/wcfsetup/install/files/lib/action/UserDisableAvatarAction.class.php
new file mode 100644
index 00000000000..def03c989fd
--- /dev/null
+++ b/wcfsetup/install/files/lib/action/UserDisableAvatarAction.class.php
@@ -0,0 +1,83 @@
+<?php
+
+namespace wcf\action;
+
+use wcf\command\user\DisableAvatar;
+use wcf\data\user\UserProfile;
+use wcf\system\exception\IllegalLinkException;
+use wcf\system\exception\PermissionDeniedException;
+use wcf\system\form\builder\field\BooleanFormField;
+use wcf\system\form\builder\field\DateFormField;
+use wcf\system\form\builder\field\dependency\EmptyFormFieldDependency;
+use wcf\system\form\builder\field\MultilineTextFormField;
+use wcf\system\form\builder\Psr15DialogForm;
+use wcf\system\WCF;
+
+/**
+ * Handles disabling of user avatars.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class UserDisableAvatarAction extends UserManagementAction
+{
+    #[\Override]
+    protected function performAction(UserProfile $userProfile, array $data): void
+    {
+        $reason = $data['reason'];
+        if ($data['neverExpires']) {
+            $expires = 0;
+        } else {
+            $expires = $data['expires'];
+        }
+
+        (new DisableAvatar($userProfile->getDecoratedObject(), $reason, $expires))();
+    }
+
+    #[\Override]
+    protected function assertUserCanBeManaged(UserProfile $userProfile): void
+    {
+        parent::assertUserCanBeManaged($userProfile);
+
+        if (!WCF::getSession()->getPermission('admin.user.canDisableAvatar')) {
+            throw new PermissionDeniedException();
+        }
+
+        if ($userProfile->disableAvatar !== 0) {
+            throw new IllegalLinkException();
+        }
+    }
+
+    #[\Override]
+    protected function getForm(): Psr15DialogForm
+    {
+        $form = new Psr15DialogForm(
+            static::class,
+            WCF::getLanguage()->getDynamicVariable('wcf.user.disableAvatar.confirmMessage')
+        );
+        $form->appendChildren([
+            MultilineTextFormField::create('reason')
+                ->rows(3)
+                ->label('wcf.global.reason'),
+            BooleanFormField::create('neverExpires')
+                ->label('wcf.user.disableAvatar.neverExpires')
+                ->value(true),
+            DateFormField::create('expires')
+                ->label('wcf.user.disableAvatar.expires')
+                ->description('wcf.user.disableAvatar.expires.description')
+                ->earliestDate(TIME_NOW)
+                ->required()
+                ->addDependency(
+                    EmptyFormFieldDependency::create('neverExpires')
+                        ->fieldId('neverExpires')
+                ),
+        ]);
+
+        $form->markRequiredFields(false);
+        $form->build();
+
+        return $form;
+    }
+}
diff --git a/wcfsetup/install/files/lib/action/UserDisableCoverPhotoAction.class.php b/wcfsetup/install/files/lib/action/UserDisableCoverPhotoAction.class.php
new file mode 100644
index 00000000000..9cd57fe9d42
--- /dev/null
+++ b/wcfsetup/install/files/lib/action/UserDisableCoverPhotoAction.class.php
@@ -0,0 +1,83 @@
+<?php
+
+namespace wcf\action;
+
+use wcf\command\user\DisableCoverPhoto;
+use wcf\data\user\UserProfile;
+use wcf\system\exception\IllegalLinkException;
+use wcf\system\exception\PermissionDeniedException;
+use wcf\system\form\builder\field\BooleanFormField;
+use wcf\system\form\builder\field\DateFormField;
+use wcf\system\form\builder\field\dependency\EmptyFormFieldDependency;
+use wcf\system\form\builder\field\MultilineTextFormField;
+use wcf\system\form\builder\Psr15DialogForm;
+use wcf\system\WCF;
+
+/**
+ * Handles disabling user cover photos.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class UserDisableCoverPhotoAction extends UserManagementAction
+{
+    #[\Override]
+    protected function performAction(UserProfile $userProfile, array $data): void
+    {
+        $reason = $data['reason'];
+        if ($data['neverExpires']) {
+            $expires = 0;
+        } else {
+            $expires = $data['expires'];
+        }
+
+        (new DisableCoverPhoto($userProfile->getDecoratedObject(), $reason, $expires))();
+    }
+
+    #[\Override]
+    protected function assertUserCanBeManaged(UserProfile $userProfile): void
+    {
+        parent::assertUserCanBeManaged($userProfile);
+
+        if (!WCF::getSession()->getPermission('admin.user.canDisableCoverPhoto')) {
+            throw new PermissionDeniedException();
+        }
+
+        if ($userProfile->disableCoverPhoto !== 0) {
+            throw new IllegalLinkException();
+        }
+    }
+
+    #[\Override]
+    protected function getForm(): Psr15DialogForm
+    {
+        $form = new Psr15DialogForm(
+            static::class,
+            WCF::getLanguage()->getDynamicVariable('wcf.user.disableCoverPhoto.confirmMessage')
+        );
+        $form->appendChildren([
+            MultilineTextFormField::create('reason')
+                ->rows(3)
+                ->label('wcf.global.reason'),
+            BooleanFormField::create('neverExpires')
+                ->label('wcf.user.disableCoverPhoto.neverExpires')
+                ->value(true),
+            DateFormField::create('expires')
+                ->label('wcf.user.disableCoverPhoto.expires')
+                ->description('wcf.user.disableCoverPhoto.expires.description')
+                ->earliestDate(TIME_NOW)
+                ->required()
+                ->addDependency(
+                    EmptyFormFieldDependency::create('neverExpires')
+                        ->fieldId('neverExpires')
+                ),
+        ]);
+
+        $form->markRequiredFields(false);
+        $form->build();
+
+        return $form;
+    }
+}
diff --git a/wcfsetup/install/files/lib/action/UserDisableSignatureAction.class.php b/wcfsetup/install/files/lib/action/UserDisableSignatureAction.class.php
new file mode 100644
index 00000000000..49baaecfb0b
--- /dev/null
+++ b/wcfsetup/install/files/lib/action/UserDisableSignatureAction.class.php
@@ -0,0 +1,83 @@
+<?php
+
+namespace wcf\action;
+
+use wcf\command\user\DisableSignature;
+use wcf\data\user\UserProfile;
+use wcf\system\exception\IllegalLinkException;
+use wcf\system\exception\PermissionDeniedException;
+use wcf\system\form\builder\field\BooleanFormField;
+use wcf\system\form\builder\field\DateFormField;
+use wcf\system\form\builder\field\dependency\EmptyFormFieldDependency;
+use wcf\system\form\builder\field\MultilineTextFormField;
+use wcf\system\form\builder\Psr15DialogForm;
+use wcf\system\WCF;
+
+/**
+ * Handles disabling of user signatures.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class UserDisableSignatureAction extends UserManagementAction
+{
+    #[\Override]
+    protected function performAction(UserProfile $userProfile, array $data): void
+    {
+        $reason = $data['reason'];
+        if ($data['neverExpires']) {
+            $expires = 0;
+        } else {
+            $expires = $data['expires'];
+        }
+
+        (new DisableSignature($userProfile->getDecoratedObject(), $reason, $expires))();
+    }
+
+    #[\Override]
+    protected function assertUserCanBeManaged(UserProfile $userProfile): void
+    {
+        parent::assertUserCanBeManaged($userProfile);
+
+        if (!WCF::getSession()->getPermission('admin.user.canDisableSignature')) {
+            throw new PermissionDeniedException();
+        }
+
+        if ($userProfile->disableSignature !== 0) {
+            throw new IllegalLinkException();
+        }
+    }
+
+    #[\Override]
+    protected function getForm(): Psr15DialogForm
+    {
+        $form = new Psr15DialogForm(
+            static::class,
+            WCF::getLanguage()->getDynamicVariable('wcf.user.disableSignature.confirmMessage')
+        );
+        $form->appendChildren([
+            MultilineTextFormField::create('reason')
+                ->rows(3)
+                ->label('wcf.global.reason'),
+            BooleanFormField::create('neverExpires')
+                ->label('wcf.user.disableSignature.neverExpires')
+                ->value(true),
+            DateFormField::create('expires')
+                ->label('wcf.user.disableSignature.expires')
+                ->description('wcf.user.disableSignature.expires.description')
+                ->earliestDate(TIME_NOW)
+                ->required()
+                ->addDependency(
+                    EmptyFormFieldDependency::create('neverExpires')
+                        ->fieldId('neverExpires')
+                ),
+        ]);
+
+        $form->markRequiredFields(false);
+        $form->build();
+
+        return $form;
+    }
+}
diff --git a/wcfsetup/install/files/lib/action/UserManagementAction.class.php b/wcfsetup/install/files/lib/action/UserManagementAction.class.php
new file mode 100644
index 00000000000..d0f47ab8e7f
--- /dev/null
+++ b/wcfsetup/install/files/lib/action/UserManagementAction.class.php
@@ -0,0 +1,83 @@
+<?php
+
+namespace wcf\action;
+
+use Laminas\Diactoros\Response\JsonResponse;
+use Psr\Http\Message\ResponseInterface;
+use Psr\Http\Message\ServerRequestInterface;
+use Psr\Http\Server\RequestHandlerInterface;
+use wcf\data\user\group\UserGroup;
+use wcf\data\user\UserProfile;
+use wcf\http\Helper;
+use wcf\system\cache\runtime\UserProfileRuntimeCache;
+use wcf\system\exception\IllegalLinkException;
+use wcf\system\exception\PermissionDeniedException;
+use wcf\system\form\builder\Psr15DialogForm;
+use wcf\system\WCF;
+
+/**
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+abstract class UserManagementAction implements RequestHandlerInterface
+{
+    #[\Override]
+    public function handle(ServerRequestInterface $request): ResponseInterface
+    {
+        $parameters = Helper::mapQueryParameters(
+            $request->getQueryParams(),
+            <<<'EOT'
+                array {
+                    id: positive-int
+                }
+                EOT
+        );
+
+        $user = UserProfileRuntimeCache::getInstance()->getObject($parameters['id']);
+
+        if (!$user) {
+            throw new IllegalLinkException();
+        }
+
+        $this->assertUserCanBeManaged($user);
+
+        $form = $this->getForm();
+
+        if ($request->getMethod() === 'GET') {
+            return $form->toResponse();
+        } elseif ($request->getMethod() === 'POST') {
+            $response = $form->validateRequest($request);
+            if ($response !== null) {
+                return $response;
+            }
+
+            $data = $form->getData()['data'];
+
+            $this->performAction($user, $data);
+
+            return new JsonResponse([]);
+        } else {
+            throw new \LogicException('Unreachable');
+        }
+    }
+
+    protected function assertUserCanBeManaged(UserProfile $userProfile): void
+    {
+        if ($userProfile->userID === WCF::getUser()->userID) {
+            throw new IllegalLinkException();
+        }
+
+        if (!UserGroup::isAccessibleGroup($userProfile->getGroupIDs())) {
+            throw new PermissionDeniedException();
+        }
+    }
+
+    /**
+     * @param array<string, mixed> $data
+     */
+    abstract protected function performAction(UserProfile $userProfile, array $data): void;
+
+    abstract protected function getForm(): Psr15DialogForm;
+}
diff --git a/wcfsetup/install/files/lib/bootstrap/com.woltlab.wcf.php b/wcfsetup/install/files/lib/bootstrap/com.woltlab.wcf.php
index 3e860c32740..85180ea839c 100644
--- a/wcfsetup/install/files/lib/bootstrap/com.woltlab.wcf.php
+++ b/wcfsetup/install/files/lib/bootstrap/com.woltlab.wcf.php
@@ -174,6 +174,13 @@ static function (\wcf\event\endpoint\ControllerCollecting $event) {
             $event->register(new \wcf\system\endpoint\controller\core\users\options\EnableOption());
             $event->register(new \wcf\system\endpoint\controller\core\users\ranks\DeleteUserRank());
             $event->register(new \wcf\system\endpoint\controller\core\users\trophies\DeleteUserTrophy());
+            $event->register(new \wcf\system\endpoint\controller\core\users\GetUserProfileHeader());
+            $event->register(new \wcf\system\endpoint\controller\core\users\UnbanUser());
+            $event->register(new \wcf\system\endpoint\controller\core\users\EnableUserAvatar());
+            $event->register(new \wcf\system\endpoint\controller\core\users\EnableUserSignature());
+            $event->register(new \wcf\system\endpoint\controller\core\users\EnableUserCoverPhoto());
+            $event->register(new \wcf\system\endpoint\controller\core\users\EnableUser());
+            $event->register(new \wcf\system\endpoint\controller\core\users\DisableUser());
             $event->register(new \wcf\system\endpoint\controller\core\interactions\GetBulkContextMenuOptions());
             $event->register(new \wcf\system\endpoint\controller\core\interactions\GetContextMenuOptions());
             $event->register(new \wcf\system\endpoint\controller\core\articles\DeleteArticle());
diff --git a/wcfsetup/install/files/lib/command/user/BanUser.class.php b/wcfsetup/install/files/lib/command/user/BanUser.class.php
new file mode 100644
index 00000000000..150ef94186f
--- /dev/null
+++ b/wcfsetup/install/files/lib/command/user/BanUser.class.php
@@ -0,0 +1,38 @@
+<?php
+
+namespace wcf\command\user;
+
+use wcf\data\user\User;
+use wcf\data\user\UserEditor;
+use wcf\event\user\UserBanned;
+use wcf\system\event\EventHandler;
+
+/**
+ * Ban a user.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class BanUser
+{
+    public function __construct(
+        private readonly User $user,
+        private readonly string $reason,
+        private readonly int $banExpires = 0,
+    ) {
+    }
+
+    public function __invoke(): void
+    {
+        (new UserEditor($this->user))->update([
+            'banned' => 1,
+            'banReason' => $this->reason,
+            'banExpires' => $this->banExpires,
+        ]);
+
+        $event = new UserBanned($this->user);
+        EventHandler::getInstance()->fire($event);
+    }
+}
diff --git a/wcfsetup/install/files/lib/command/user/DisableAvatar.class.php b/wcfsetup/install/files/lib/command/user/DisableAvatar.class.php
new file mode 100644
index 00000000000..0675dc13397
--- /dev/null
+++ b/wcfsetup/install/files/lib/command/user/DisableAvatar.class.php
@@ -0,0 +1,37 @@
+<?php
+
+namespace wcf\command\user;
+
+use wcf\data\user\User;
+use wcf\data\user\UserEditor;
+use wcf\event\user\UserAvatarDisabled;
+use wcf\system\event\EventHandler;
+
+/**
+ * Disable a user's avatar.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class DisableAvatar
+{
+    public function __construct(
+        private readonly User $user,
+        private readonly string $reason,
+        private readonly int $expires = 0,
+    ) {}
+
+    public function __invoke(): void
+    {
+        (new UserEditor($this->user))->update([
+            'disableAvatar' => 1,
+            'disableAvatarReason' => $this->reason,
+            'disableAvatarExpires' => $this->expires,
+        ]);
+
+        $event = new UserAvatarDisabled($this->user);
+        EventHandler::getInstance()->fire($event);
+    }
+}
diff --git a/wcfsetup/install/files/lib/command/user/DisableCoverPhoto.class.php b/wcfsetup/install/files/lib/command/user/DisableCoverPhoto.class.php
new file mode 100644
index 00000000000..a4172124064
--- /dev/null
+++ b/wcfsetup/install/files/lib/command/user/DisableCoverPhoto.class.php
@@ -0,0 +1,37 @@
+<?php
+
+namespace wcf\command\user;
+
+use wcf\data\user\User;
+use wcf\data\user\UserEditor;
+use wcf\event\user\UserCoverPhotoDisabled;
+use wcf\system\event\EventHandler;
+
+/**
+ * Disable a user's cover photo.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class DisableCoverPhoto
+{
+    public function __construct(
+        private readonly User $user,
+        private readonly string $reason,
+        private readonly int $expires = 0,
+    ) {}
+
+    public function __invoke(): void
+    {
+        (new UserEditor($this->user))->update([
+            'disableCoverPhoto' => 1,
+            'disableCoverPhotoReason' => $this->reason,
+            'disableCoverPhotoExpires' => $this->expires,
+        ]);
+
+        $event = new UserCoverPhotoDisabled($this->user);
+        EventHandler::getInstance()->fire($event);
+    }
+}
diff --git a/wcfsetup/install/files/lib/command/user/DisableSignature.class.php b/wcfsetup/install/files/lib/command/user/DisableSignature.class.php
new file mode 100644
index 00000000000..0168f0c0372
--- /dev/null
+++ b/wcfsetup/install/files/lib/command/user/DisableSignature.class.php
@@ -0,0 +1,37 @@
+<?php
+
+namespace wcf\command\user;
+
+use wcf\data\user\User;
+use wcf\data\user\UserEditor;
+use wcf\event\user\UserSignatureDisabled;
+use wcf\system\event\EventHandler;
+
+/**
+ * Disable a user's signature.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class DisableSignature
+{
+    public function __construct(
+        private readonly User $user,
+        private readonly string $reason,
+        private readonly int $expires = 0,
+    ) {}
+
+    public function __invoke(): void
+    {
+        (new UserEditor($this->user))->update([
+            'disableSignature' => 1,
+            'disableSignatureReason' => $this->reason,
+            'disableSignatureExpires' => $this->expires,
+        ]);
+
+        $event = new UserSignatureDisabled($this->user);
+        EventHandler::getInstance()->fire($event);
+    }
+}
diff --git a/wcfsetup/install/files/lib/command/user/DisableUser.class.php b/wcfsetup/install/files/lib/command/user/DisableUser.class.php
new file mode 100644
index 00000000000..4b1d0efab72
--- /dev/null
+++ b/wcfsetup/install/files/lib/command/user/DisableUser.class.php
@@ -0,0 +1,57 @@
+<?php
+
+namespace wcf\command\user;
+
+use ParagonIE\ConstantTime\Hex;
+use wcf\data\user\group\UserGroup;
+use wcf\data\user\User;
+use wcf\data\user\UserAction;
+use wcf\data\user\UserEditor;
+use wcf\event\user\UserDisabled;
+use wcf\system\event\EventHandler;
+use wcf\util\UserRegistrationUtil;
+
+/**
+ * Disable a user.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class DisableUser
+{
+    public function __construct(
+        private readonly User $user,
+    ) {}
+
+    public function __invoke(): void
+    {
+        $this->resetActivationCode($this->user);
+        $this->addUserToGuestGroup($this->user);
+
+        $event = new UserDisabled($this->user);
+        EventHandler::getInstance()->fire($event);
+    }
+
+    private function addUserToGuestGroup(User $user): void
+    {
+        (new UserAction([$user], 'addToGroups', [
+            'groups' => UserGroup::getGroupIDsByType([UserGroup::GUESTS]),
+            'deleteOldGroups' => true,
+            'addDefaultGroups' => false,
+        ]))->executeAction();
+    }
+
+    private function resetActivationCode(User $user): void
+    {
+        // We reset the activationCode (which indicates, that the user is not enabled) AND disable the email
+        // confirm status, because if the user can enable himself by an email confirmation and we do not reset
+        // the email confirmed status, the behavior is undefined, because a user exists, which is not enabled
+        // but has a valid email address (Which doesn't usually happen).
+        (new UserEditor($user))->update([
+            'activationCode' => UserRegistrationUtil::getActivationCode(),
+            'emailConfirmed' => Hex::encode(\random_bytes(20)),
+        ]);
+    }
+}
diff --git a/wcfsetup/install/files/lib/command/user/EnableAvatar.class.php b/wcfsetup/install/files/lib/command/user/EnableAvatar.class.php
new file mode 100644
index 00000000000..21d6f3770e1
--- /dev/null
+++ b/wcfsetup/install/files/lib/command/user/EnableAvatar.class.php
@@ -0,0 +1,33 @@
+<?php
+
+namespace wcf\command\user;
+
+use wcf\data\user\User;
+use wcf\data\user\UserEditor;
+use wcf\event\user\UserAvatarEnabled;
+use wcf\system\event\EventHandler;
+
+/**
+ * Enable a user's avatar.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class EnableAvatar
+{
+    public function __construct(
+        private readonly User $user,
+    ) {}
+
+    public function __invoke(): void
+    {
+        (new UserEditor($this->user))->update([
+            'disableAvatar' => 0,
+        ]);
+
+        $event = new UserAvatarEnabled($this->user);
+        EventHandler::getInstance()->fire($event);
+    }
+}
diff --git a/wcfsetup/install/files/lib/command/user/EnableCoverPhoto.class.php b/wcfsetup/install/files/lib/command/user/EnableCoverPhoto.class.php
new file mode 100644
index 00000000000..0514cc31bf5
--- /dev/null
+++ b/wcfsetup/install/files/lib/command/user/EnableCoverPhoto.class.php
@@ -0,0 +1,33 @@
+<?php
+
+namespace wcf\command\user;
+
+use wcf\data\user\User;
+use wcf\data\user\UserEditor;
+use wcf\event\user\UserCoverPhotoEnabled;
+use wcf\system\event\EventHandler;
+
+/**
+ * Enable a user's cover photo.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class EnableCoverPhoto
+{
+    public function __construct(
+        private readonly User $user,
+    ) {}
+
+    public function __invoke(): void
+    {
+        (new UserEditor($this->user))->update([
+            'disableCoverPhoto' => 0,
+        ]);
+
+        $event = new UserCoverPhotoEnabled($this->user);
+        EventHandler::getInstance()->fire($event);
+    }
+}
diff --git a/wcfsetup/install/files/lib/command/user/EnableSignature.class.php b/wcfsetup/install/files/lib/command/user/EnableSignature.class.php
new file mode 100644
index 00000000000..c9cb0388106
--- /dev/null
+++ b/wcfsetup/install/files/lib/command/user/EnableSignature.class.php
@@ -0,0 +1,31 @@
+<?php
+
+namespace wcf\command\user;
+
+use wcf\data\user\User;
+use wcf\data\user\UserEditor;
+use wcf\event\user\UserSignatureEnabled;
+use wcf\system\event\EventHandler;
+
+/**
+ * Enable a user's signature.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class EnableSignature
+{
+    public function __construct(private readonly User $user) {}
+
+    public function __invoke(): void
+    {
+        (new UserEditor($this->user))->update([
+            'disableSignature' => 0,
+        ]);
+
+        $event = new UserSignatureEnabled($this->user);
+        EventHandler::getInstance()->fire($event);
+    }
+}
diff --git a/wcfsetup/install/files/lib/command/user/EnableUser.class.php b/wcfsetup/install/files/lib/command/user/EnableUser.class.php
new file mode 100644
index 00000000000..ec2e9be6da8
--- /dev/null
+++ b/wcfsetup/install/files/lib/command/user/EnableUser.class.php
@@ -0,0 +1,90 @@
+<?php
+
+namespace wcf\command\user;
+
+use wcf\data\user\group\UserGroup;
+use wcf\data\user\User;
+use wcf\data\user\UserAction;
+use wcf\data\user\UserEditor;
+use wcf\event\user\UserEnabled;
+use wcf\system\email\Email;
+use wcf\system\email\mime\MimePartFacade;
+use wcf\system\email\mime\RecipientAwareTextMimePart;
+use wcf\system\email\UserMailbox;
+use wcf\system\event\EventHandler;
+use wcf\system\user\group\assignment\UserGroupAssignmentHandler;
+
+/**
+ * Enable a user.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class EnableUser
+{
+    public function __construct(
+        private readonly User $user,
+        public readonly bool $skipNotification = false,
+    ) {}
+
+    public function __invoke(): void
+    {
+        $this->activateUser($this->user);
+        $this->addUserToUserGroup($this->user);
+        $this->sendEmailNotification($this->user);
+
+        UserGroupAssignmentHandler::getInstance()->checkUsers([$this->user->userID]);
+
+        $event = new UserEnabled($this->user);
+        EventHandler::getInstance()->fire($event);
+    }
+
+    private function sendEmailNotification(User $user): void
+    {
+        if ($this->skipNotification) {
+            return;
+        }
+
+        $email = new Email();
+        $email->setMessageID(
+            \sprintf(
+                'com.woltlab.wcf.adminActivation/%d/%d/%s',
+                $user->userID,
+                TIME_NOW,
+                \bin2hex(\random_bytes(8))
+            )
+        );
+        $email->addRecipient(new UserMailbox($user));
+        $email->setSubject($user->getLanguage()->getDynamicVariable('wcf.acp.user.activation.mail.subject'));
+        $email->setBody(new MimePartFacade([
+            new RecipientAwareTextMimePart('text/html', 'email_adminActivation'),
+            new RecipientAwareTextMimePart('text/plain', 'email_adminActivation'),
+        ]));
+        $email->send();
+    }
+
+    private function addUserToUserGroup(User $user): void
+    {
+        (new UserAction([$user], 'addToGroups', [
+            'groups' => UserGroup::getGroupIDsByType([UserGroup::USERS]),
+            'deleteOldGroups' => true,
+            'addDefaultGroups' => false,
+        ]))->executeAction();
+    }
+
+    private function activateUser(User $user): void
+    {
+        $data = [
+            'activationCode' => 0,
+            'blacklistMatches' => '',
+        ];
+
+        if (!((int)REGISTER_ACTIVATION_METHOD & User::REGISTER_ACTIVATION_USER)) {
+            $data['emailConfirmed'] = null;
+        }
+
+        (new UserEditor($user))->update($data);
+    }
+}
diff --git a/wcfsetup/install/files/lib/command/user/UnbanUser.class.php b/wcfsetup/install/files/lib/command/user/UnbanUser.class.php
new file mode 100644
index 00000000000..b3b6d371fe9
--- /dev/null
+++ b/wcfsetup/install/files/lib/command/user/UnbanUser.class.php
@@ -0,0 +1,32 @@
+<?php
+
+namespace wcf\command\user;
+
+use wcf\data\user\User;
+use wcf\data\user\UserEditor;
+use wcf\event\user\UserUnbanned;
+use wcf\system\event\EventHandler;
+
+/**
+ * Unban a user.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class UnbanUser
+{
+    public function __construct(private readonly User $user) {}
+
+    public function __invoke(): void
+    {
+        (new UserEditor($this->user))->update([
+            'banned' => 0,
+            'banExpires' => 0,
+        ]);
+
+        $event = new UserUnbanned($this->user);
+        EventHandler::getInstance()->fire($event);
+    }
+}
diff --git a/wcfsetup/install/files/lib/data/user/UserAction.class.php b/wcfsetup/install/files/lib/data/user/UserAction.class.php
index f74ac389fac..9603b77c61c 100644
--- a/wcfsetup/install/files/lib/data/user/UserAction.class.php
+++ b/wcfsetup/install/files/lib/data/user/UserAction.class.php
@@ -3,6 +3,15 @@
 namespace wcf\data\user;
 
 use ParagonIE\ConstantTime\Hex;
+use wcf\command\user\BanUser;
+use wcf\command\user\DisableAvatar;
+use wcf\command\user\DisableSignature;
+use wcf\command\user\DisableUser;
+use wcf\command\user\EnableAvatar;
+use wcf\command\user\EnableCoverPhoto;
+use wcf\command\user\EnableSignature;
+use wcf\command\user\EnableUser;
+use wcf\command\user\UnbanUser;
 use wcf\data\AbstractDatabaseObjectAction;
 use wcf\data\file\FileAction;
 use wcf\data\IClipboardAction;
@@ -27,7 +36,6 @@
 use wcf\system\style\FontAwesomeIcon;
 use wcf\system\user\group\assignment\UserGroupAssignmentHandler;
 use wcf\system\WCF;
-use wcf\util\UserRegistrationUtil;
 
 /**
  * Executes user-related actions.
@@ -225,9 +233,15 @@ public function validateUnban()
      * Bans users.
      *
      * @return string
+     *
+     * @deprecated 6.3 use `BanUser`
      */
     public function ban()
     {
+        if ($this->objects === []) {
+            $this->readObjects();
+        }
+
         $banExpires = $this->parameters['banExpires'];
         if ($banExpires) {
             $banExpires = \DateTimeImmutable::createFromFormat('!Y-m-d', $banExpires, new \DateTimeZone(\TIMEZONE))->getTimestamp();
@@ -238,22 +252,9 @@ public function ban()
             $banExpires = 0;
         }
 
-        $conditionBuilder = new PreparedStatementConditionBuilder();
-        $conditionBuilder->add('userID IN (?)', [$this->objectIDs]);
-
-        $sql = "UPDATE  wcf1_user
-                SET     banned = ?,
-                        banReason = ?,
-                        banExpires = ?
-                " . $conditionBuilder;
-        $statement = WCF::getDB()->prepare($sql);
-        $statement->execute(
-            \array_merge([
-                1,
-                $this->parameters['banReason'],
-                $banExpires,
-            ], $conditionBuilder->getParameters())
-        );
+        foreach ($this->getObjects() as $userEditor) {
+            (new BanUser($userEditor->getDecoratedObject(), $this->parameters['banReason'], $banExpires))();
+        }
 
         $this->unmarkItems();
 
@@ -266,23 +267,18 @@ public function ban()
      * Unbans users.
      *
      * @return void
+     *
+     * @deprecated 6.3 use `UnbanUser`
      */
     public function unban()
     {
-        $conditionBuilder = new PreparedStatementConditionBuilder();
-        $conditionBuilder->add('userID IN (?)', [$this->objectIDs]);
+        if ($this->objects === []) {
+            $this->readObjects();
+        }
 
-        $sql = "UPDATE  wcf1_user
-                SET     banned = ?,
-                        banExpires = ?
-                " . $conditionBuilder;
-        $statement = WCF::getDB()->prepare($sql);
-        $statement->execute(
-            \array_merge([
-                0,
-                0,
-            ], $conditionBuilder->getParameters())
-        );
+        foreach ($this->getObjects() as $userEditor) {
+            (new UnbanUser($userEditor->getDecoratedObject()))();
+        }
     }
 
     /**
@@ -763,6 +759,8 @@ public function unconfirmEmail()
      * Enables users.
      *
      * @return void
+     *
+     * @deprecated 6.3 use `EnableUser`
      */
     public function enable()
     {
@@ -770,52 +768,9 @@ public function enable()
             $this->readObjects();
         }
 
-        $data = [
-            'activationCode' => 0,
-            'blacklistMatches' => '',
-        ];
-
-        if (!((int)REGISTER_ACTIVATION_METHOD & User::REGISTER_ACTIVATION_USER)) {
-            $data['emailConfirmed'] = null;
-        }
-
-        $action = new self($this->objects, 'update', [
-            'data' => $data,
-            'removeGroups' => UserGroup::getGroupIDsByType([UserGroup::GUESTS]),
-        ]);
-        $action->executeAction();
-        $action = new self($this->objects, 'addToGroups', [
-            'groups' => UserGroup::getGroupIDsByType([UserGroup::USERS]),
-            'deleteOldGroups' => false,
-            'addDefaultGroups' => false,
-        ]);
-        $action->executeAction();
-
-        // send e-mail notification
-        if (empty($this->parameters['skipNotification'])) {
-            foreach ($this->getObjects() as $user) {
-                $email = new Email();
-                $email->setMessageID(\sprintf(
-                    'com.woltlab.wcf.adminActivation/%d/%d/%s',
-                    $user->userID,
-                    TIME_NOW,
-                    \bin2hex(\random_bytes(8))
-                ));
-                $email->addRecipient(new UserMailbox($user->getDecoratedObject()));
-                $email->setSubject($user->getLanguage()->getDynamicVariable('wcf.acp.user.activation.mail.subject'));
-                $email->setBody(new MimePartFacade([
-                    new RecipientAwareTextMimePart('text/html', 'email_adminActivation'),
-                    new RecipientAwareTextMimePart('text/plain', 'email_adminActivation'),
-                ]));
-                $email->send();
-            }
-        }
-
-        $userIDs = [];
         foreach ($this->getObjects() as $user) {
-            $userIDs[] = $user->userID;
+            (new EnableUser($user->getDecoratedObject(), $this->parameters['skipNotification'] ?? false))();
         }
-        UserGroupAssignmentHandler::getInstance()->checkUsers($userIDs);
 
         $this->unmarkItems();
     }
@@ -824,6 +779,8 @@ public function enable()
      * Disables users.
      *
      * @return void
+     *
+     * @deprecated 6.3 use `DisableUser`
      */
     public function disable()
     {
@@ -831,24 +788,9 @@ public function disable()
             $this->readObjects();
         }
 
-        // We reset the activationCode (which indicates, that the user is not enabled) AND disable the email
-        // confirm status, because if the user can enable himself by an email confirmation and we do not reset
-        // the email confirmed status, the behavior is undefined, because a user exists, which is not enabled
-        // but has a valid email address (Which doesn't usually happen).
-        $action = new self($this->objects, 'update', [
-            'data' => [
-                'activationCode' => UserRegistrationUtil::getActivationCode(),
-                'emailConfirmed' => Hex::encode(\random_bytes(20)),
-            ],
-            'removeGroups' => UserGroup::getGroupIDsByType([UserGroup::USERS]),
-        ]);
-        $action->executeAction();
-        $action = new self($this->objects, 'addToGroups', [
-            'groups' => UserGroup::getGroupIDsByType([UserGroup::GUESTS]),
-            'deleteOldGroups' => false,
-            'addDefaultGroups' => false,
-        ]);
-        $action->executeAction();
+        foreach ($this->getObjects() as $userEditor) {
+            (new DisableUser($userEditor->getDecoratedObject()))();
+        }
 
         $this->unmarkItems();
     }
@@ -896,6 +838,8 @@ public function validateDisableSignature()
      * Disables the signature of the handled users.
      *
      * @return void
+     *
+     * @deprecated 6.3 use `DisableSignature`
      */
     public function disableSignature()
     {
@@ -911,11 +855,7 @@ public function disableSignature()
         }
 
         foreach ($this->getObjects() as $userEditor) {
-            $userEditor->update([
-                'disableSignature' => 1,
-                'disableSignatureReason' => $this->parameters['disableSignatureReason'],
-                'disableSignatureExpires' => $disableSignatureExpires,
-            ]);
+            (new DisableSignature($userEditor->getDecoratedObject(), $this->parameters['disableSignatureReason'], $disableSignatureExpires))();
         }
     }
 
@@ -943,6 +883,8 @@ public function validateEnableSignature()
      * Enables the signature of the handled users.
      *
      * @return void
+     *
+     * @deprecated 6.3 use `EnableSignature`
      */
     public function enableSignature()
     {
@@ -951,9 +893,7 @@ public function enableSignature()
         }
 
         foreach ($this->getObjects() as $userEditor) {
-            $userEditor->update([
-                'disableSignature' => 0,
-            ]);
+            (new EnableSignature($userEditor->getDecoratedObject()))();
         }
     }
 
@@ -974,6 +914,8 @@ public function validateDisableAvatar()
      * Disables the avatar of the handled users.
      *
      * @return void
+     *
+     * @deprecated 6.3 use `DisableAvatar`
      */
     public function disableAvatar()
     {
@@ -989,11 +931,7 @@ public function disableAvatar()
         }
 
         foreach ($this->getObjects() as $userEditor) {
-            $userEditor->update([
-                'disableAvatar' => 1,
-                'disableAvatarReason' => $this->parameters['disableAvatarReason'],
-                'disableAvatarExpires' => $disableAvatarExpires,
-            ]);
+            (new DisableAvatar($userEditor->getDecoratedObject(), $this->parameters['disableAvatarReason'], $disableAvatarExpires))();
         }
     }
 
@@ -1016,6 +954,8 @@ public function validateDisableCoverPhoto()
      *
      * @return void
      * @since   5.2
+     *
+     * @deprecated 6.3 use `DisableCoverPhoto`
      */
     public function disableCoverPhoto()
     {
@@ -1063,6 +1003,8 @@ public function validateEnableAvatar()
      * Enables the avatar of the handled users.
      *
      * @return void
+     *
+     * @deprecated 6.3 use `EnableAvatar`
      */
     public function enableAvatar()
     {
@@ -1071,9 +1013,7 @@ public function enableAvatar()
         }
 
         foreach ($this->getObjects() as $userEditor) {
-            $userEditor->update([
-                'disableAvatar' => 0,
-            ]);
+            (new EnableAvatar($userEditor->getDecoratedObject()))();
         }
     }
 
@@ -1103,6 +1043,8 @@ public function validateEnableCoverPhoto()
      *
      * @return void
      * @since   5.2
+     *
+     * @deprecated 6.3 use `EnableCoverPhoto`
      */
     public function enableCoverPhoto()
     {
@@ -1111,9 +1053,7 @@ public function enableCoverPhoto()
         }
 
         foreach ($this->getObjects() as $userEditor) {
-            $userEditor->update([
-                'disableCoverPhoto' => 0,
-            ]);
+            (new EnableCoverPhoto($userEditor->getDecoratedObject()))();
         }
     }
 
diff --git a/wcfsetup/install/files/lib/event/user/UserAvatarDisabled.class.php b/wcfsetup/install/files/lib/event/user/UserAvatarDisabled.class.php
new file mode 100644
index 00000000000..1bbd4a325cc
--- /dev/null
+++ b/wcfsetup/install/files/lib/event/user/UserAvatarDisabled.class.php
@@ -0,0 +1,21 @@
+<?php
+
+namespace wcf\event\user;
+
+use wcf\data\user\User;
+use wcf\event\IPsr14Event;
+
+/**
+ * Indicates that a user's avatar has been disabled.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class UserAvatarDisabled implements IPsr14Event
+{
+    public function __construct(public readonly User $user)
+    {
+    }
+}
diff --git a/wcfsetup/install/files/lib/event/user/UserAvatarEnabled.class.php b/wcfsetup/install/files/lib/event/user/UserAvatarEnabled.class.php
new file mode 100644
index 00000000000..491b0df860d
--- /dev/null
+++ b/wcfsetup/install/files/lib/event/user/UserAvatarEnabled.class.php
@@ -0,0 +1,21 @@
+<?php
+
+namespace wcf\event\user;
+
+use wcf\data\user\User;
+use wcf\event\IPsr14Event;
+
+/**
+ * Indicates that a user's avatar has been enabled.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class UserAvatarEnabled implements IPsr14Event
+{
+    public function __construct(public readonly User $user)
+    {
+    }
+}
diff --git a/wcfsetup/install/files/lib/event/user/UserBanned.class.php b/wcfsetup/install/files/lib/event/user/UserBanned.class.php
new file mode 100644
index 00000000000..e2b8dfe2658
--- /dev/null
+++ b/wcfsetup/install/files/lib/event/user/UserBanned.class.php
@@ -0,0 +1,22 @@
+<?php
+
+namespace wcf\event\user;
+
+use wcf\data\user\User;
+use wcf\event\IPsr14Event;
+
+/**
+ * Indicates that a user has been banned.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class UserBanned implements IPsr14Event
+{
+    public function __construct(public readonly User $user)
+    {
+
+    }
+}
diff --git a/wcfsetup/install/files/lib/event/user/UserCoverPhotoDisabled.class.php b/wcfsetup/install/files/lib/event/user/UserCoverPhotoDisabled.class.php
new file mode 100644
index 00000000000..42958b668ec
--- /dev/null
+++ b/wcfsetup/install/files/lib/event/user/UserCoverPhotoDisabled.class.php
@@ -0,0 +1,21 @@
+<?php
+
+namespace wcf\event\user;
+
+use wcf\data\user\User;
+use wcf\event\IPsr14Event;
+
+/**
+ * Indicates that a user's cover photo has been disabled.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class UserCoverPhotoDisabled implements IPsr14Event
+{
+    public function __construct(public readonly User $user)
+    {
+    }
+}
diff --git a/wcfsetup/install/files/lib/event/user/UserCoverPhotoEnabled.class.php b/wcfsetup/install/files/lib/event/user/UserCoverPhotoEnabled.class.php
new file mode 100644
index 00000000000..9c6fb19d22a
--- /dev/null
+++ b/wcfsetup/install/files/lib/event/user/UserCoverPhotoEnabled.class.php
@@ -0,0 +1,21 @@
+<?php
+
+namespace wcf\event\user;
+
+use wcf\data\user\User;
+use wcf\event\IPsr14Event;
+
+/**
+ * Indicates that a user's cover photo has been enabled.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class UserCoverPhotoEnabled implements IPsr14Event
+{
+    public function __construct(public readonly User $user)
+    {
+    }
+}
diff --git a/wcfsetup/install/files/lib/event/user/UserDisabled.class.php b/wcfsetup/install/files/lib/event/user/UserDisabled.class.php
new file mode 100644
index 00000000000..e1c258b734e
--- /dev/null
+++ b/wcfsetup/install/files/lib/event/user/UserDisabled.class.php
@@ -0,0 +1,21 @@
+<?php
+
+namespace wcf\event\user;
+
+use wcf\data\user\User;
+use wcf\event\IPsr14Event;
+
+/**
+ * Indicates that a user has been disabled.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class UserDisabled implements IPsr14Event
+{
+    public function __construct(public readonly User $user)
+    {
+    }
+}
diff --git a/wcfsetup/install/files/lib/event/user/UserEnabled.class.php b/wcfsetup/install/files/lib/event/user/UserEnabled.class.php
new file mode 100644
index 00000000000..0adf525db4f
--- /dev/null
+++ b/wcfsetup/install/files/lib/event/user/UserEnabled.class.php
@@ -0,0 +1,21 @@
+<?php
+
+namespace wcf\event\user;
+
+use wcf\data\user\User;
+use wcf\event\IPsr14Event;
+
+/**
+ * Indicates that a user has been enabled.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class UserEnabled implements IPsr14Event
+{
+    public function __construct(public readonly User $user)
+    {
+    }
+}
diff --git a/wcfsetup/install/files/lib/event/user/UserSignatureDisabled.class.php b/wcfsetup/install/files/lib/event/user/UserSignatureDisabled.class.php
new file mode 100644
index 00000000000..1c56b33e31b
--- /dev/null
+++ b/wcfsetup/install/files/lib/event/user/UserSignatureDisabled.class.php
@@ -0,0 +1,21 @@
+<?php
+
+namespace wcf\event\user;
+
+use wcf\data\user\User;
+use wcf\event\IPsr14Event;
+
+/**
+ * Indicates that a user's signature has been disabled.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class UserSignatureDisabled implements IPsr14Event
+{
+    public function __construct(public readonly User $user)
+    {
+    }
+}
diff --git a/wcfsetup/install/files/lib/event/user/UserSignatureEnabled.class.php b/wcfsetup/install/files/lib/event/user/UserSignatureEnabled.class.php
new file mode 100644
index 00000000000..03c9cb44195
--- /dev/null
+++ b/wcfsetup/install/files/lib/event/user/UserSignatureEnabled.class.php
@@ -0,0 +1,21 @@
+<?php
+
+namespace wcf\event\user;
+
+use wcf\data\user\User;
+use wcf\event\IPsr14Event;
+
+/**
+ * Indicates that a user's signature has been enabled.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class UserSignatureEnabled implements IPsr14Event
+{
+    public function __construct(public readonly User $user)
+    {
+    }
+}
diff --git a/wcfsetup/install/files/lib/event/user/UserUnbanned.class.php b/wcfsetup/install/files/lib/event/user/UserUnbanned.class.php
new file mode 100644
index 00000000000..9f79cf1cb49
--- /dev/null
+++ b/wcfsetup/install/files/lib/event/user/UserUnbanned.class.php
@@ -0,0 +1,21 @@
+<?php
+
+namespace wcf\event\user;
+
+use wcf\data\user\User;
+use wcf\event\IPsr14Event;
+
+/**
+ * Indicates that a user has been unbanned.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+final class UserUnbanned implements IPsr14Event
+{
+    public function __construct(public readonly User $user)
+    {
+    }
+}
diff --git a/wcfsetup/install/files/lib/system/endpoint/controller/core/users/DisableUser.class.php b/wcfsetup/install/files/lib/system/endpoint/controller/core/users/DisableUser.class.php
new file mode 100644
index 00000000000..10cbaf08f6c
--- /dev/null
+++ b/wcfsetup/install/files/lib/system/endpoint/controller/core/users/DisableUser.class.php
@@ -0,0 +1,54 @@
+<?php
+
+namespace wcf\system\endpoint\controller\core\users;
+
+use Laminas\Diactoros\Response\JsonResponse;
+use Psr\Http\Message\ResponseInterface;
+use Psr\Http\Message\ServerRequestInterface;
+use wcf\data\user\group\UserGroup;
+use wcf\data\user\User;
+use wcf\http\Helper;
+use wcf\system\endpoint\IController;
+use wcf\system\endpoint\PostRequest;
+use wcf\system\exception\IllegalLinkException;
+use wcf\system\exception\PermissionDeniedException;
+use wcf\system\WCF;
+
+/**
+ * API endpoint for disabling a user.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+#[PostRequest('/core/users/{id:\d+}/disable')]
+final class DisableUser implements IController
+{
+    #[\Override]
+    public function __invoke(ServerRequestInterface $request, array $variables): ResponseInterface
+    {
+        $user = Helper::fetchObjectFromRequestParameter($variables['id'], User::class);
+
+        $this->assertUserCanBeDisabled($user);
+
+        if (!$user->pendingActivation()) {
+            (new \wcf\command\user\DisableUser($user))();
+        }
+
+        return new JsonResponse([]);
+    }
+
+    private function assertUserCanBeDisabled(User $user): void
+    {
+        if (WCF::getUser()->userID === $user->userID) {
+            throw new IllegalLinkException();
+        }
+        if (!WCF::getSession()->getPermission('admin.user.canEnableUser')) {
+            throw new PermissionDeniedException();
+        }
+        if (!UserGroup::isAccessibleGroup($user->getGroupIDs())) {
+            throw new PermissionDeniedException();
+        }
+    }
+}
diff --git a/wcfsetup/install/files/lib/system/endpoint/controller/core/users/EnableUser.class.php b/wcfsetup/install/files/lib/system/endpoint/controller/core/users/EnableUser.class.php
new file mode 100644
index 00000000000..d55e46856c1
--- /dev/null
+++ b/wcfsetup/install/files/lib/system/endpoint/controller/core/users/EnableUser.class.php
@@ -0,0 +1,54 @@
+<?php
+
+namespace wcf\system\endpoint\controller\core\users;
+
+use Laminas\Diactoros\Response\JsonResponse;
+use Psr\Http\Message\ResponseInterface;
+use Psr\Http\Message\ServerRequestInterface;
+use wcf\data\user\group\UserGroup;
+use wcf\data\user\User;
+use wcf\http\Helper;
+use wcf\system\endpoint\IController;
+use wcf\system\endpoint\PostRequest;
+use wcf\system\exception\IllegalLinkException;
+use wcf\system\exception\PermissionDeniedException;
+use wcf\system\WCF;
+
+/**
+ * API endpoint for enabling a user.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+#[PostRequest('/core/users/{id:\d+}/enable')]
+final class EnableUser implements IController
+{
+    #[\Override]
+    public function __invoke(ServerRequestInterface $request, array $variables): ResponseInterface
+    {
+        $user = Helper::fetchObjectFromRequestParameter($variables['id'], User::class);
+
+        $this->assertUserCanBeEnabled($user);
+
+        if ($user->pendingActivation()) {
+            (new \wcf\command\user\EnableUser($user))();
+        }
+
+        return new JsonResponse([]);
+    }
+
+    private function assertUserCanBeEnabled(User $user): void
+    {
+        if (WCF::getUser()->userID === $user->userID) {
+            throw new IllegalLinkException();
+        }
+        if (!WCF::getSession()->getPermission('admin.user.canEnableUser')) {
+            throw new PermissionDeniedException();
+        }
+        if (!UserGroup::isAccessibleGroup($user->getGroupIDs())) {
+            throw new PermissionDeniedException();
+        }
+    }
+}
diff --git a/wcfsetup/install/files/lib/system/endpoint/controller/core/users/EnableUserAvatar.class.php b/wcfsetup/install/files/lib/system/endpoint/controller/core/users/EnableUserAvatar.class.php
new file mode 100644
index 00000000000..b0a180ec008
--- /dev/null
+++ b/wcfsetup/install/files/lib/system/endpoint/controller/core/users/EnableUserAvatar.class.php
@@ -0,0 +1,55 @@
+<?php
+
+namespace wcf\system\endpoint\controller\core\users;
+
+use Laminas\Diactoros\Response\JsonResponse;
+use Psr\Http\Message\ResponseInterface;
+use Psr\Http\Message\ServerRequestInterface;
+use wcf\command\user\EnableAvatar;
+use wcf\data\user\group\UserGroup;
+use wcf\data\user\User;
+use wcf\http\Helper;
+use wcf\system\endpoint\IController;
+use wcf\system\endpoint\PostRequest;
+use wcf\system\exception\IllegalLinkException;
+use wcf\system\exception\PermissionDeniedException;
+use wcf\system\WCF;
+
+/**
+ * API endpoint for enabling a user's avatar.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+#[PostRequest('/core/users/{id:\d+}/enable-avatar')]
+final class EnableUserAvatar implements IController
+{
+    #[\Override]
+    public function __invoke(ServerRequestInterface $request, array $variables): ResponseInterface
+    {
+        $user = Helper::fetchObjectFromRequestParameter($variables['id'], User::class);
+
+        $this->assertAvatarCanBeEnabled($user);
+
+        if ($user->disableAvatar) {
+            (new EnableAvatar($user))();
+        }
+
+        return new JsonResponse([]);
+    }
+
+    private function assertAvatarCanBeEnabled(User $user): void
+    {
+        if (WCF::getUser()->userID === $user->userID) {
+            throw new IllegalLinkException();
+        }
+        if (!WCF::getSession()->getPermission('admin.user.canDisableAvatar')) {
+            throw new PermissionDeniedException();
+        }
+        if (!UserGroup::isAccessibleGroup($user->getGroupIDs())) {
+            throw new PermissionDeniedException();
+        }
+    }
+}
diff --git a/wcfsetup/install/files/lib/system/endpoint/controller/core/users/EnableUserCoverPhoto.class.php b/wcfsetup/install/files/lib/system/endpoint/controller/core/users/EnableUserCoverPhoto.class.php
new file mode 100644
index 00000000000..8de36634f62
--- /dev/null
+++ b/wcfsetup/install/files/lib/system/endpoint/controller/core/users/EnableUserCoverPhoto.class.php
@@ -0,0 +1,55 @@
+<?php
+
+namespace wcf\system\endpoint\controller\core\users;
+
+use Laminas\Diactoros\Response\JsonResponse;
+use Psr\Http\Message\ResponseInterface;
+use Psr\Http\Message\ServerRequestInterface;
+use wcf\command\user\EnableCoverPhoto;
+use wcf\data\user\group\UserGroup;
+use wcf\data\user\User;
+use wcf\http\Helper;
+use wcf\system\endpoint\IController;
+use wcf\system\endpoint\PostRequest;
+use wcf\system\exception\IllegalLinkException;
+use wcf\system\exception\PermissionDeniedException;
+use wcf\system\WCF;
+
+/**
+ * API endpoint for enabling a user's cover photo.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+#[PostRequest('/core/users/{id:\d+}/enable-cover-photo')]
+final class EnableUserCoverPhoto implements IController
+{
+    #[\Override]
+    public function __invoke(ServerRequestInterface $request, array $variables): ResponseInterface
+    {
+        $user = Helper::fetchObjectFromRequestParameter($variables['id'], User::class);
+
+        $this->assertCoverPhotoCanBeEnabled($user);
+
+        if ($user->disableCoverPhoto) {
+            (new EnableCoverPhoto($user))();
+        }
+
+        return new JsonResponse([]);
+    }
+
+    private function assertCoverPhotoCanBeEnabled(User $user): void
+    {
+        if (WCF::getUser()->userID === $user->userID) {
+            throw new IllegalLinkException();
+        }
+        if (!WCF::getSession()->getPermission('admin.user.canDisableCoverPhoto')) {
+            throw new PermissionDeniedException();
+        }
+        if (!UserGroup::isAccessibleGroup($user->getGroupIDs())) {
+            throw new PermissionDeniedException();
+        }
+    }
+}
diff --git a/wcfsetup/install/files/lib/system/endpoint/controller/core/users/EnableUserSignature.class.php b/wcfsetup/install/files/lib/system/endpoint/controller/core/users/EnableUserSignature.class.php
new file mode 100644
index 00000000000..6626244e6eb
--- /dev/null
+++ b/wcfsetup/install/files/lib/system/endpoint/controller/core/users/EnableUserSignature.class.php
@@ -0,0 +1,55 @@
+<?php
+
+namespace wcf\system\endpoint\controller\core\users;
+
+use Laminas\Diactoros\Response\JsonResponse;
+use Psr\Http\Message\ResponseInterface;
+use Psr\Http\Message\ServerRequestInterface;
+use wcf\command\user\EnableSignature;
+use wcf\data\user\group\UserGroup;
+use wcf\data\user\User;
+use wcf\http\Helper;
+use wcf\system\endpoint\IController;
+use wcf\system\endpoint\PostRequest;
+use wcf\system\exception\IllegalLinkException;
+use wcf\system\exception\PermissionDeniedException;
+use wcf\system\WCF;
+
+/**
+ * API endpoint for enabling a user's signature.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+#[PostRequest('/core/users/{id:\d+}/enable-signature')]
+final class EnableUserSignature implements IController
+{
+    #[\Override]
+    public function __invoke(ServerRequestInterface $request, array $variables): ResponseInterface
+    {
+        $user = Helper::fetchObjectFromRequestParameter($variables['id'], User::class);
+
+        $this->assertSignatureCanBeEnabled($user);
+
+        if ($user->disableSignature) {
+            (new EnableSignature($user))();
+        }
+
+        return new JsonResponse([]);
+    }
+
+    private function assertSignatureCanBeEnabled(User $user): void
+    {
+        if (WCF::getUser()->userID === $user->userID) {
+            throw new IllegalLinkException();
+        }
+        if (!WCF::getSession()->getPermission('admin.user.canDisableSignature')) {
+            throw new PermissionDeniedException();
+        }
+        if (!UserGroup::isAccessibleGroup($user->getGroupIDs())) {
+            throw new PermissionDeniedException();
+        }
+    }
+}
diff --git a/wcfsetup/install/files/lib/system/endpoint/controller/core/users/GetUserProfileHeader.class.php b/wcfsetup/install/files/lib/system/endpoint/controller/core/users/GetUserProfileHeader.class.php
new file mode 100644
index 00000000000..977a695e115
--- /dev/null
+++ b/wcfsetup/install/files/lib/system/endpoint/controller/core/users/GetUserProfileHeader.class.php
@@ -0,0 +1,52 @@
+<?php
+
+namespace wcf\system\endpoint\controller\core\users;
+
+use Laminas\Diactoros\Response\JsonResponse;
+use Psr\Http\Message\ResponseInterface;
+use Psr\Http\Message\ServerRequestInterface;
+use wcf\data\user\UserProfile;
+use wcf\system\cache\runtime\UserProfileRuntimeCache;
+use wcf\system\endpoint\GetRequest;
+use wcf\system\endpoint\IController;
+use wcf\system\exception\PermissionDeniedException;
+use wcf\system\exception\UserInputException;
+use wcf\system\view\user\profile\UserProfileHeaderView;
+use wcf\system\WCF;
+
+/**
+ * API endpoint for getting the header template for a user profile.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+#[GetRequest('/core/users/{id:\d+}/profile-header')]
+final class GetUserProfileHeader implements IController
+{
+    #[\Override]
+    public function __invoke(ServerRequestInterface $request, array $variables): ResponseInterface
+    {
+        $userProfile = UserProfileRuntimeCache::getInstance()->getObject((int)$variables['id']);
+
+        $this->assertUserProfileCanBeViewed($userProfile);
+
+        $view = new UserProfileHeaderView($userProfile);
+
+        return new JsonResponse([
+            'template' => $view->__toString(),
+        ]);
+    }
+
+    private function assertUserProfileCanBeViewed(?UserProfile $userProfile): void
+    {
+        if ($userProfile === null) {
+            throw new UserInputException('id');
+        }
+
+        if ($userProfile->userID !== WCF::getUser()->userID && !WCF::getSession()->getPermission('user.profile.canViewUserProfile')) {
+            throw new PermissionDeniedException();
+        }
+    }
+}
diff --git a/wcfsetup/install/files/lib/system/endpoint/controller/core/users/UnbanUser.class.php b/wcfsetup/install/files/lib/system/endpoint/controller/core/users/UnbanUser.class.php
new file mode 100644
index 00000000000..e7a7c0d05cf
--- /dev/null
+++ b/wcfsetup/install/files/lib/system/endpoint/controller/core/users/UnbanUser.class.php
@@ -0,0 +1,54 @@
+<?php
+
+namespace wcf\system\endpoint\controller\core\users;
+
+use Laminas\Diactoros\Response\JsonResponse;
+use Psr\Http\Message\ResponseInterface;
+use Psr\Http\Message\ServerRequestInterface;
+use wcf\data\user\group\UserGroup;
+use wcf\data\user\User;
+use wcf\http\Helper;
+use wcf\system\endpoint\IController;
+use wcf\system\endpoint\PostRequest;
+use wcf\system\exception\IllegalLinkException;
+use wcf\system\exception\PermissionDeniedException;
+use wcf\system\WCF;
+
+/**
+ * API endpoint for unbanning a user.
+ *
+ * @author Olaf Braun
+ * @copyright 2001-2025 WoltLab GmbH
+ * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
+ * @since 6.3
+ */
+#[PostRequest('/core/users/{id:\d+}/unban')]
+final class UnbanUser implements IController
+{
+    #[\Override]
+    public function __invoke(ServerRequestInterface $request, array $variables): ResponseInterface
+    {
+        $user = Helper::fetchObjectFromRequestParameter($variables['id'], User::class);
+
+        $this->assertUserCanUnbanned($user);
+
+        if ($user->banned) {
+            (new \wcf\command\user\UnbanUser($user))();
+        }
+
+        return new JsonResponse([]);
+    }
+
+    private function assertUserCanUnbanned(User $user): void
+    {
+        if (WCF::getUser()->userID === $user->userID) {
+            throw new IllegalLinkException();
+        }
+        if (!WCF::getSession()->getPermission('admin.user.canBanUser')) {
+            throw new PermissionDeniedException();
+        }
+        if (!UserGroup::isAccessibleGroup($user->getGroupIDs())) {
+            throw new PermissionDeniedException();
+        }
+    }
+}
diff --git a/wcfsetup/install/files/lib/system/interaction/StandaloneInteractionContextMenuComponent.class.php b/wcfsetup/install/files/lib/system/interaction/StandaloneInteractionContextMenuComponent.class.php
index c60147ccb84..c3263b1731e 100644
--- a/wcfsetup/install/files/lib/system/interaction/StandaloneInteractionContextMenuComponent.class.php
+++ b/wcfsetup/install/files/lib/system/interaction/StandaloneInteractionContextMenuComponent.class.php
@@ -25,6 +25,8 @@ public function __construct(
         protected readonly string $redirectUrl,
         protected readonly string $reloadHeaderEndpoint = '',
         protected ?InteractionContextMenuComponentConfiguration $configuration = null,
+        protected readonly string $headerCssClassName = '.contentHeaderTitle',
+        protected readonly bool $reloadContextMenu = true,
     ) {
         parent::__construct($provider, $configuration);
 
@@ -49,6 +51,8 @@ public function render(): string
                 'objectID' => $this->object->getObjectID(),
                 'redirectUrl' => $this->redirectUrl,
                 'reloadHeaderEndpoint' => $this->reloadHeaderEndpoint,
+                'headerCssClassName' => $this->headerCssClassName,
+                'reloadContextMenu' => $this->reloadContextMenu,
                 'configuration' => $this->configuration,
             ],
         );
diff --git a/wcfsetup/install/files/lib/system/interaction/user/UserManagementInteractions.class.php b/wcfsetup/install/files/lib/system/interaction/user/UserManagementInteractions.class.php
index dcdc71bbee1..8700f12aa7e 100644
--- a/wcfsetup/install/files/lib/system/interaction/user/UserManagementInteractions.class.php
+++ b/wcfsetup/install/files/lib/system/interaction/user/UserManagementInteractions.class.php
@@ -3,20 +3,23 @@
 namespace wcf\system\interaction\user;
 
 use wcf\acp\form\UserEditForm;
-use wcf\data\DatabaseObject;
+use wcf\action\UserBanAction;
+use wcf\action\UserDisableAvatarAction;
+use wcf\action\UserDisableCoverPhotoAction;
+use wcf\action\UserDisableSignatureAction;
 use wcf\data\user\group\UserGroup;
 use wcf\data\user\UserProfile;
 use wcf\event\interaction\user\UserManagementInteractionCollecting;
 use wcf\system\event\EventHandler;
-use wcf\system\interaction\AbstractInteraction;
 use wcf\system\interaction\AbstractInteractionProvider;
+use wcf\system\interaction\FormBuilderDialogInteraction;
+use wcf\system\interaction\LinkInteraction;
+use wcf\system\interaction\RpcInteraction;
 use wcf\system\request\LinkHandler;
 use wcf\system\WCF;
-use wcf\util\StringUtil;
 
 /**
  * Interaction provider for the management context menu in user profiles.
- * This interaction provider currently only works on the user profile page due to the nature of the underlying (outdated) JavaScript code.
  *
  * @author      Marcel Werk
  * @copyright   2001-2025 WoltLab GmbH
@@ -27,136 +30,243 @@ final class UserManagementInteractions extends AbstractInteractionProvider
 {
     public function __construct()
     {
-        if (WCF::getSession()->getPermission('admin.user.canBanUser')) {
-            $this->addInteraction(
-                new class(
-                    'ban',
-                    static fn(UserProfile $user) => UserGroup::isAccessibleGroup($user->getGroupIDs()) && WCF::getUser()->userID !== $user->userID
-                ) extends AbstractInteraction {
-                    #[\Override]
-                    public function render(DatabaseObject $object): string
-                    {
-                        \assert($object instanceof UserProfile);
-                        $title = WCF::getLanguage()->get($object->banned ? 'wcf.user.unban' : 'wcf.user.ban');
-
-                        return <<<HTML
-                            <button
-                                type="button"
-                                class="jsButtonUserBan"
-                            >{$title}</button>
-                            HTML;
+        $this->addInteraction(
+            new FormBuilderDialogInteraction(
+                'ban',
+                LinkHandler::getInstance()->getControllerLink(UserBanAction::class, [
+                    'id' => '%s',
+                ]),
+                'wcf.user.ban',
+                static function (UserProfile $user): bool {
+                    if (WCF::getUser()->userID === $user->userID) {
+                        return false;
                     }
-                }
-            );
-        }
-        if (WCF::getSession()->getPermission('admin.user.canDisableAvatar')) {
-            $this->addInteraction(
-                new class(
-                    'disable-avatar',
-                    static fn(UserProfile $user) => UserGroup::isAccessibleGroup($user->getGroupIDs()) && WCF::getUser()->userID !== $user->userID
-                ) extends AbstractInteraction {
-                    #[\Override]
-                    public function render(DatabaseObject $object): string
-                    {
-                        \assert($object instanceof UserProfile);
-                        $title = WCF::getLanguage()->get($object->disableAvatar ? 'wcf.user.enableAvatar' : 'wcf.user.disableAvatar');
-
-                        return <<<HTML
-                            <button
-                                type="button"
-                                class="jsButtonUserDisableAvatar"
-                            >{$title}</button>
-                            HTML;
+                    if (!WCF::getSession()->getPermission('admin.user.canBanUser')) {
+                        return false;
                     }
-                }
-            );
-        }
-        if (WCF::getSession()->getPermission('admin.user.canDisableSignature')) {
-            $this->addInteraction(
-                new class(
-                    'disable-signature',
-                    static fn(UserProfile $user) => UserGroup::isAccessibleGroup($user->getGroupIDs()) && WCF::getUser()->userID !== $user->userID
-                ) extends AbstractInteraction {
-                    #[\Override]
-                    public function render(DatabaseObject $object): string
-                    {
-                        \assert($object instanceof UserProfile);
-                        $title = WCF::getLanguage()->get($object->disableSignature ? 'wcf.user.enableSignature' : 'wcf.user.disableSignature');
-
-                        return <<<HTML
-                            <button
-                                type="button"
-                                class="jsButtonUserDisableSignature"
-                            >{$title}</button>
-                            HTML;
+                    if (!UserGroup::isAccessibleGroup($user->getGroupIDs())) {
+                        return false;
                     }
-                }
-            );
-        }
-        if (WCF::getSession()->getPermission('admin.user.canDisableCoverPhoto')) {
-            $this->addInteraction(
-                new class(
-                    'disable-cover-photo',
-                    static fn(UserProfile $user) => UserGroup::isAccessibleGroup($user->getGroupIDs()) && WCF::getUser()->userID !== $user->userID
-                ) extends AbstractInteraction {
-                    #[\Override]
-                    public function render(DatabaseObject $object): string
-                    {
-                        \assert($object instanceof UserProfile);
-                        $title = WCF::getLanguage()->get($object->disableCoverPhoto ? 'wcf.user.enableCoverPhoto' : 'wcf.user.disableCoverPhoto');
-
-                        return <<<HTML
-                            <button
-                                type="button"
-                                class="jsButtonUserDisableCoverPhoto"
-                            >{$title}</button>
-                            HTML;
+
+                    return $user->banned === 0;
+                },
+            )
+        );
+        $this->addInteraction(
+            new RpcInteraction(
+                'unban',
+                'core/users/%s/unban',
+                'wcf.user.unban',
+                isAvailableCallback: static function (UserProfile $user): bool {
+                    if (WCF::getUser()->userID === $user->userID) {
+                        return false;
                     }
-                }
-            );
-        }
-        if (WCF::getSession()->getPermission('admin.user.canEnableUser')) {
-            $this->addInteraction(
-                new class(
-                    'enable',
-                    static fn(UserProfile $user) => UserGroup::isAccessibleGroup($user->getGroupIDs()) && WCF::getUser()->userID !== $user->userID
-                ) extends AbstractInteraction {
-                    #[\Override]
-                    public function render(DatabaseObject $object): string
-                    {
-                        \assert($object instanceof UserProfile);
-                        $title = WCF::getLanguage()->get($object->pendingActivation() ? 'wcf.acp.user.enable' : 'wcf.acp.user.disable');
-
-                        return <<<HTML
-                            <button
-                                type="button"
-                                class="jsButtonUserEnable"
-                            >{$title}</button>
-                            HTML;
+                    if (!WCF::getSession()->getPermission('admin.user.canBanUser')) {
+                        return false;
                     }
-                }
-            );
-        }
-        if (WCF::getSession()->getPermission('admin.general.canUseAcp') && WCF::getSession()->getPermission('admin.user.canEditUser')) {
-            $this->addInteraction(
-                new class(
-                    'edit',
-                    static fn(UserProfile $user) => UserGroup::isAccessibleGroup($user->getGroupIDs()) && WCF::getUser()->userID !== $user->userID
-                ) extends AbstractInteraction {
-                    #[\Override]
-                    public function render(DatabaseObject $object): string
-                    {
-                        return \sprintf(
-                            '<a href="%s">%s</a>',
-                            StringUtil::encodeHTML(
-                                LinkHandler::getInstance()->getControllerLink(UserEditForm::class, ['id' => $object->getObjectID()])
-                            ),
-                            WCF::getLanguage()->get('wcf.user.edit')
-                        );
+                    if (!UserGroup::isAccessibleGroup($user->getGroupIDs())) {
+                        return false;
+                    }
+
+                    return $user->banned === 1;
+                },
+            )
+        );
+        
+        $this->addInteraction(
+            new FormBuilderDialogInteraction(
+                'disable-avatar',
+                LinkHandler::getInstance()->getControllerLink(UserDisableAvatarAction::class, [
+                    'id' => '%s',
+                ]),
+                'wcf.user.disableAvatar',
+                static function (UserProfile $user): bool {
+                    if (WCF::getUser()->userID === $user->userID) {
+                        return false;
+                    }
+                    if (!WCF::getSession()->getPermission('admin.user.canDisableAvatar')) {
+                        return false;
+                    }
+                    if (!UserGroup::isAccessibleGroup($user->getGroupIDs())) {
+                        return false;
+                    }
+
+                    return $user->disableAvatar === 0;
+                },
+            )
+        );
+        $this->addInteraction(
+            new RpcInteraction(
+                'enable-avatar',
+                'core/users/%s/enable-avatar',
+                'wcf.user.enableAvatar',
+                isAvailableCallback: static function (UserProfile $user): bool {
+                    if (WCF::getUser()->userID === $user->userID) {
+                        return false;
                     }
+                    if (!WCF::getSession()->getPermission('admin.user.canDisableAvatar')) {
+                        return false;
+                    }
+                    if (!UserGroup::isAccessibleGroup($user->getGroupIDs())) {
+                        return false;
+                    }
+
+                    return $user->disableAvatar === 1;
+                },
+            )
+        );
+        
+        $this->addInteraction(
+            new FormBuilderDialogInteraction(
+                'disable-signature',
+                LinkHandler::getInstance()->getControllerLink(UserDisableSignatureAction::class, [
+                    'id' => '%s',
+                ]),
+                'wcf.user.disableSignature',
+                static function (UserProfile $user): bool {
+                    if (WCF::getUser()->userID === $user->userID) {
+                        return false;
+                    }
+                    if (!WCF::getSession()->getPermission('admin.user.canDisableSignature')) {
+                        return false;
+                    }
+                    if (!UserGroup::isAccessibleGroup($user->getGroupIDs())) {
+                        return false;
+                    }
+
+                    return $user->disableSignature === 0;
+                },
+            )
+        );
+        $this->addInteraction(
+            new RpcInteraction(
+                'enable-signature',
+                'core/users/%s/enable-signature',
+                'wcf.user.enableSignature',
+                isAvailableCallback: static function (UserProfile $user): bool {
+                    if (WCF::getUser()->userID === $user->userID) {
+                        return false;
+                    }
+                    if (!WCF::getSession()->getPermission('admin.user.canDisableSignature')) {
+                        return false;
+                    }
+                    if (!UserGroup::isAccessibleGroup($user->getGroupIDs())) {
+                        return false;
+                    }
+
+                    return $user->disableSignature === 1;
+                },
+            )
+        );
+
+        $this->addInteraction(
+            new FormBuilderDialogInteraction(
+                'disable-cover-photo',
+                LinkHandler::getInstance()->getControllerLink(UserDisableCoverPhotoAction::class, [
+                    'id' => '%s',
+                ]),
+                'wcf.user.disableCoverPhoto',
+                static function (UserProfile $user): bool {
+                    if (WCF::getUser()->userID === $user->userID) {
+                        return false;
+                    }
+                    if (!WCF::getSession()->getPermission('admin.user.canDisableCoverPhoto')) {
+                        return false;
+                    }
+                    if (!UserGroup::isAccessibleGroup($user->getGroupIDs())) {
+                        return false;
+                    }
+
+                    return $user->disableCoverPhoto === 0;
+                },
+            )
+        );
+        $this->addInteraction(
+            new RpcInteraction(
+                'enable-cover-photo',
+                'core/users/%s/enable-cover-photo',
+                'wcf.user.enableCoverPhoto',
+                isAvailableCallback: static function (UserProfile $user): bool {
+                    if (WCF::getUser()->userID === $user->userID) {
+                        return false;
+                    }
+                    if (!WCF::getSession()->getPermission('admin.user.canDisableCoverPhoto')) {
+                        return false;
+                    }
+                    if (!UserGroup::isAccessibleGroup($user->getGroupIDs())) {
+                        return false;
+                    }
+
+                    return $user->disableCoverPhoto === 1;
+                },
+            )
+        );
+
+        $this->addInteraction(
+            new RpcInteraction(
+                'disable',
+                'core/users/%s/disable',
+                'wcf.acp.user.disable',
+                isAvailableCallback: static function (UserProfile $user): bool {
+                    if (WCF::getUser()->userID === $user->userID) {
+                        return false;
+                    }
+                    if (!WCF::getSession()->getPermission('admin.user.canEnableUser')) {
+                        return false;
+                    }
+                    if (!UserGroup::isAccessibleGroup($user->getGroupIDs())) {
+                        return false;
+                    }
+
+                    return !$user->pendingActivation();
+                },
+            )
+        );
+        $this->addInteraction(
+            new RpcInteraction(
+                'enable',
+                'core/users/%s/enable',
+                'wcf.acp.user.enable',
+                isAvailableCallback: static function (UserProfile $user): bool {
+                    if (WCF::getUser()->userID === $user->userID) {
+                        return false;
+                    }
+                    if (!WCF::getSession()->getPermission('admin.user.canEnableUser')) {
+                        return false;
+                    }
+                    if (!UserGroup::isAccessibleGroup($user->getGroupIDs())) {
+                        return false;
+                    }
+
+                    return $user->pendingActivation();
+                },
+            )
+        );
+
+        $this->addInteraction(
+            new LinkInteraction(
+                'edit',
+                UserEditForm::class,
+                'wcf.user.edit',
+                static function (UserProfile $user): bool {
+                    if (WCF::getUser()->userID === $user->userID) {
+                        return false;
+                    }
+                    if (!WCF::getSession()->getPermission('admin.general.canUseAcp')) {
+                        return false;
+                    }
+                    if (!WCF::getSession()->getPermission('admin.user.canEditUser')) {
+                        return false;
+                    }
+                    if (!UserGroup::isAccessibleGroup($user->getGroupIDs())) {
+                        return false;
+                    }
+
+                    return true;
                 }
-            );
-        }
+            )
+        );
+
 
         EventHandler::getInstance()->fire(
             new UserManagementInteractionCollecting($this)
diff --git a/wcfsetup/install/files/lib/system/view/user/profile/UserProfileHeaderView.class.php b/wcfsetup/install/files/lib/system/view/user/profile/UserProfileHeaderView.class.php
index 2aa4497c6b0..1561d87919b 100644
--- a/wcfsetup/install/files/lib/system/view/user/profile/UserProfileHeaderView.class.php
+++ b/wcfsetup/install/files/lib/system/view/user/profile/UserProfileHeaderView.class.php
@@ -146,13 +146,16 @@ private function initManagementContextMenu(): void
             new UserManagementInteractions(),
             $this->user,
             LinkHandler::getInstance()->getControllerLink(MembersListPage::class),
+            reloadHeaderEndpoint: "core/users/{$this->user->userID}/profile-header",
             configuration: new InteractionContextMenuComponentConfiguration(
                 cssClassName: 'userProfileHeader__button',
                 buttonCssClassName: 'button small',
                 dropdownMenuCssClassName: 'userProfileHeader__managementOptions',
+                tooltip: 'wcf.user.profile.management',
                 icon: FontAwesomeIcon::fromValues('gear'),
-                tooltip: 'wcf.user.profile.management'
-            )
+            ),
+            headerCssClassName: '.userProfileHeader',
+            reloadContextMenu: false
         );
 
         if (!$this->isInAccessibleGroup() || $this->user->userID == WCF::getUser()->userID) {