[jboss-jira] [JBoss JIRA] Commented: (JBPORTAL-1858) User registration portlet should be configurable to disable new registrations

[dpocock (JIRA)]

    [ http://jira.jboss.com/jira/browse/JBPORTAL-1858?page=comments#action_12393706 ] 
            
dpocock commented on JBPORTAL-1858:
-----------------------------------



I've found the information here:
http://docs.jboss.com/jbportal/v2.6.3/referenceGuide/html/identityportlets.html#d0e7039

When I was trying to configure the portlet, I simply looked at the preferences for the portlet instance.

There are preferences for the captcha and lost password recovery, so I didn't look any further - may we need to have:
a) all the options in one place, or
b) a note on the preferences page to say that other options are in the XML descriptors

Maybe the default setting should be one of the following:
- no public registrations
- registrations require approval

> User registration portlet should be configurable to disable new registrations
> -----------------------------------------------------------------------------
>
>                 Key: JBPORTAL-1858
>                 URL: http://jira.jboss.com/jira/browse/JBPORTAL-1858
>             Project: JBoss Portal
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>    Affects Versions: 2.6.3 Final
>         Environment: Debian, JBoss 4.2.1.GA
>            Reporter: dpocock
>
> There should be a configuration option for the User Portlet allowing the administrator to choose whether new user registrations are permitted.
> This option should be disabled by default - in other words, new registrations should not be possible until the administrator has enabled this option.
> A more elaborate solution might involve a combination of the following features:
> - require the administrator to approve each new registration
> - only allow registration from trusted IP addresses
> - the user must validate their email address
> - the email address must match a regular expression or be on a pre-defined list

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira