Hi there.

Is there any way to apply an ACL to the newaccount action?

I now know how to disable it, but it would be nice not to have to use a
command line to create accounts. At the same time, we don't want just
anyone to be able to create accounts.

I could *hide* the action, by removing it from the login screen and
putting a call to it on some other, ACL-protected page, but that's at
best obscuring it. People can always craft the necessary URL themselves.
Not really good enough.

An alternative would be to code the action so that it looks for a
particular account, or refuses to operate except for (say) superuser
accounts.

Any better ideas? I'm hoping this is not a new problem.

Regards, K.

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Karl Auer (ka...@biplane.com.au)                   +61-2-64957160 (h)
http://www.biplane.com.au/~kauer/                  +61-428-957160 (mob)

GPG fingerprint: 07F3 1DF9 9D45 8BCD 7DD5 00CE 4A44 6A03 F43A 7DEF

Attachment: signature.asc
Description: This is a digitally signed message part

------------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It is the best place to buy or sell services for
just about anything Open Source.
http://p.sf.net/sfu/Xq1LFB
_______________________________________________
Moin-user mailing list
Moin-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/moin-user

Reply via email to