Indeed "Only an admin can send invitations to join this wiki" is quite
misleading. This option is only about main wiki users in a farm use
case. It's not related to how new users are created.

On Thu, Aug 18, 2016 at 2:01 PM, Vincent Massol <[email protected]> wrote:
> Hi Stefan,
>
>> On 18 Aug 2016, at 13:53, Stefan Taferner <[email protected]> wrote:
>>
>> Hi all,
>>
>> The day after upgrading http://selfbus.myxwiki.org to 8.2.1, I found a 
>> handful of spammer accounts that were created as local users in the wiki.
>>
>> The wiki was configured to
>>
>> * Only an admin can send invitations to join this wiki
>> * Both global and local users are available in the wiki
>>
>> Interestingly this still allows new users to be registered.
>> Also strange is that the registration captcha does not show as it should 
>> also.
>>
>> The wiki is now set to allow only global users, so there is no immediate 
>> problem.
>> I only wanted to report my observations, as it looks like a bug in xwiki to 
>> me.
>
> Whether someone can create an account depends on the “register” permission 
> for guest. This is what you need to configure for your wiki.
>
> Global/Local user simply defines where the user accounts can be created (on 
> the main wiki - ie global -, or on the local wiki - ie local).
>
> On the main wiki we allow everyone to register accounts :)
>
> Thanks
> -Vincent
>
>> Kind regards,
>> Stefan
>
> _______________________________________________
> users mailing list
> [email protected]
> http://lists.xwiki.org/mailman/listinfo/users



-- 
Thomas Mortagne
_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users

Reply via email to