694417 - Admins should be able to disable registrations with a config option

Status: RESOLVED DUPLICATE of bug 689511

(Cloud Services :: Server: Registration, defect)

Description

[Toby Elliott [:telliott]]

A lot of external users want to set up a server, set up a few clients, then stop allowing people to register. We should give them a simple flag in config to do so.

Comment 1

[Jason Antman]

I'm one of those external users, and yes, I think think this is a much-needed feature.

At the moment, I'm using MySQL for storage, and as a workaround have given the weave server user only SELECT and UPDATE privileges on the users table, which seems to allow clients to sync fine but prevent creation of new users. I haven't tested how the server will handle lack of privs when it tries to create a new user.

From my point of view at least (a small site, and we'll only have a maximum of 10 or so people using the sync server), a workable solution would be to have a simple config flag to prevent creation of new users (as mentioned by Toby) and roll an ultra-simple CLI script to manually add a user to the database. As an admin, I could the manually add a new account with a random password, and provide the user with that password and instructions to reset. In the interim, I'm going to implement this myself by creating a separate MySQL user with INSERT privs on the users table, and writing a simple script to manually do the INSERTS as that user.

Of course, a nicer (and supported) way of doing this would be wonderful...