---

** [tickets:#7704] Option to require email for user registration**

**Status:** review
**Milestone:** unreleased
**Labels:** sf-4 42cc sf-current 
**Created:** Fri Sep 19, 2014 07:17 PM UTC by Dave Brondsema
**Last Updated:** Thu Oct 30, 2014 12:56 PM UTC
**Owner:** Igor Bondarenko

Allura doesn't currently require an email address for user registration.  There 
should be an option to require it.  We have an option called 
`auth.require_email_addr` which is enforced on the /auth/preferences page, so 
we could use the same setting to control how user registration works.

Users should be in a 'pending' state (new flag) initially, and system should 
send a password verification email (similar to what we already do on 
/auth/preferences).  After that email is verified, user is no longer pending.

We will have to update many places in the code to check the new 'pending' 
state.  Probable best to search everywhere users are searched by 'disabled' or 
`someuser.disabled` is checked, and determine if the pending flag needs to be 
checked too.  Since pending users shouldn't be allowed to do anything yet.


---

Sent from forge-allura.apache.org because [email protected] is subscribed 
to https://forge-allura.apache.org/p/allura/tickets/

To unsubscribe from further messages, a project admin can change settings at 
https://forge-allura.apache.org/p/allura/admin/tickets/options.  Or, if this is 
a mailing list, you can unsubscribe from the mailing list.

Reply via email to