[ http://jira.jboss.com/jira/browse/JBPORTAL-1858?page=comments#action_1239... ] dpocock commented on JBPORTAL-1858: ----------------------------------- I've found the information here: http://docs.jboss.com/jbportal/v2.6.3/referenceGuide/html/identityportlet... When I was trying to configure the portlet, I simply looked at the preferences for the portlet instance. There are preferences for the captcha and lost password recovery, so I didn't look any further - may we need to have: a) all the options in one place, or b) a note on the preferences page to say that other options are in the XML descriptors Maybe the default setting should be one of the following: - no public registrations - registrations require approval -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

[ http://jira.jboss.com/jira/browse/JBPORTAL-1858?page=all ] Thomas Heute updated JBPORTAL-1858: ----------------------------------- Issue Type: Feature Request (was: Bug) Description: There should be a configuration option for the User Portlet allowing the administrator to choose whether new user registrations are permitted. This option should be disabled by default - in other words, new registrations should not be possible until the administrator has enabled this option. A more elaborate solution might involve a combination of the following features: - require the administrator to approve each new registration - only allow registration from trusted IP addresses - the user must validate their email address - the email address must match a regular expression or be on a pre-defined list was: There should be a configuration option for the User Portlet allowing the administrator to choose whether new user registrations are permitted. This option should be disabled by default - in other words, new registrations should not be possible until the administrator has enabled this option. A more elaborate solution might involve a combination of the following features: - require the administrator to approve each new registration - only allow registration from trusted IP addresses - the user must validate their email address - the email address must match a regular expression or be on a pre-defined list -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira