Message:

  A new issue has been created in JIRA.

---------------------------------------------------------------------
View the issue:
  http://issues.apache.org/jira/browse/JS1-517

Here is an overview of the issue:
---------------------------------------------------------------------
        Key: JS1-517
    Summary: Newly created user is allowed to log in even before acceptance by the 
administrator
       Type: Improvement

     Status: Unassigned
   Priority: Minor

    Project: Jetspeed
 Components: 
             Security
   Versions:
             1.6-dev

   Assignee: 
   Reporter: Jaq Marit

    Created: Fri, 3 Sep 2004 11:29 PM
    Updated: Fri, 3 Sep 2004 11:29 PM
Environment: All platforms

Description:
When a user registers for a new account, logs in immediately even without confirmation 
(awaiting acceptance from the administrator), the portal allows authentication and 
once authenticated, the portal prompts the user to change password.  However, the 
portal keeps on prompting the user for the confirmation key.  I think the user should 
never be allowed to log in if the account is not yet enabled/accepted.

Note the following settings:
  newuser.confirm.enable=true
  newuser.confirm.email.template=new-user-confirmation.vm

  # Manual approval of a new user by Jetspeed Administrator
  newuser.approval.enable=true

  # New user notification email to Jetspeed Administrator.
  newuser.notification.enable=true



---------------------------------------------------------------------
JIRA INFORMATION:
This message is automatically generated by JIRA.

If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa

If you want more information on JIRA, or have a bug to report see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to