I'm reading from the Sling web site:

"The jackrabbit-usermanager bundle delivers a REST interface to create, update 
and delete users...."

And I have been able to successfully add a user, by executing the following 
curl cmnd.

curl -F:name=reader -Fpwd=ourReader -FpwdConfirm=ourReader -F"desc=Read only 
access" http://localhost:8080/sling/system/userManager/user.create.html

Except that it seems that anyone at any time can post to this URL and create a 
user.


So I looked at the configuration for that bundle and found a checkbox labled:

Self-Registration Enabled

        When selected, the anonymous user is allowed to register a new user 
with the system. (self.registration.enabled)


And that checkbox was checked. So it seems that I should be able to uncheck 
that box and prevent anonymous user creation. 

However, it doesn't work. I can still create new users as anonymous. 

What am I doing wrong? 


Tony

Reply via email to