314509 - restrict new account creation to logged-in users

Status: VERIFIED WORKSFORME

(Bugzilla :: User Accounts, enhancement)

Description

[Mike Jones]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7

I would like to restrict access to the New Account Creation page so that only (appropriate) logged in users can add users. Currently any user can create a new account for themselves. I would like only administrators to be able to create new accounts.

This functionality should be optional, as other bugzilla installations will want to allow new users to create their own accounts.

Reproducible: Always

Steps to Reproduce:
1. Go to the bugzilla home page, do not login.
2. Click one of the 2 links to createaccount.cgi

Actual Results:  
Able to create an account without already being logged in.

Expected Results:  
No access to Create New Account page.

Only display links to Create New Account page when appropriate (administrator) users are logged in.

Comment 1

[Frédéric Buclin]

administrators add users from editusers.cgi?action=add. You can prevent users from creating user accounts by clearing the 'createemailregexp' parameter in editparams.cgi.

Comment 2

[timeless]

we should add this to the faq or installation guide or something...

Comment 3

[Frédéric Buclin]

http://www.bugzilla.org/docs/tip/html/myaccount.html and http://www.bugzilla.org/docs/tip/html/useradmin.html should be updated.

Comment 4

[victory <[e-mail]>]

Attachment: docs patch for tip v1

Comment 5

[timeless]

Comment on attachment 207898 [details] [diff] [review]
docs patch for tip v1

> To disable creation by the users themselves,
> go Parameters page

/load/ _the_ Parameters page

(or "go to" if you really like the "go" verb over "load".)

> and set createemailregexp param blank. 

/clear/ _the_ createemailregexp param.

Comment 6

[victory <[e-mail]>]

Attachment: docs patch for tip v2

Comment 7

[Colin Ogilvie [:cso]]

Comment on attachment 211924 [details] [diff] [review]
docs patch for tip v2

r=me by inspection.