Close site so people can't add themselves as users
This How-to applies to:
Plone 3.0.x
This How-to is intended for:
Site Administrators
How can I make the site semi-closed, so users can't add themselves, but need my permission?
As a site administrator, or another user with the Manager role:
- Navigate to the Security configuration page in your Plone site's Site Setup panel:
/[your-site]/@@security-controlpanel
- De-select the check box next to Enable self-registration.
- Click Save.
This will ensure that only users with the Manager role can add new users.
This will also remove the 'Join' links everywhere automatically. You can still manually browse to '/join_form' to get the registration form, but you won't be able to submit the form successfully, so this isn't a security issue. If this worries you, customize the '/join_form' form so that it just presents a policy notice.
To add new users to the site after closing registration (as a site administrator, or another user with the Manager role):
- Navigate to the Users and Groups page in your Plone site's Site Setup panel:
/[your-site]/prefs_users_overview
- Click Add new user, and register the new user account.
Please use the support forums/lists
Thanks!
Allowing self-registration but with member validation?
Only after personal validation and verification through a manager should the members become "member"
How could this semi-closed site be implemented.
It is to have a little bit more granular control, so that real members can add contents etc. but unfriendly spammers etc are kept at bay.
When creating a user, he automatically gets the role "member" we want to prevent only that but keep self-registration.