I don't think this should be exposed by default for all users -- it should 
be disabled by default and only enabled when done so explicitly by the 
developer. I would think you would only want to expose this kind of 
functionality to admin/trusted users -- otherwise, you are providing a way 
for users to spam people and load your db.auth_user table with an unlimited 
number of phantom registrations. A few other suggestions:

   - Provide an easy API for specifying a required Auth role or set of 
   roles that are allowed access to this functionality (as I think in most 
   cases you would want to restrict its usage) -- something like 
   auth.settings.bulk_register_roles.
   - Add an option to specify a limit on the number of users that can be 
   registered at a time (with some reasonable default, such as 100).
   - Maybe provide a script or a function in admin/appadmin that can clean 
   up db.auth_user by expunging bulk registrations that were not completed 
   within some (configurable) time frame.
   - Apply auth.settings.formstyle to the form.
   
Anthony

On Sunday, June 28, 2015 at 10:19:46 AM UTC-4, Massimo Di Pierro wrote:
>
> Hello web2py users,
>
> a new feature is in trunk, please help us test it.
> Originally developed here https://github.com/web2py/web2py/pull/985 as 
> "invite" has been renamed as "bulk_register". It is available to all web2py 
> applications at this user:
>
> http://127.0.0.1:8000/welcome/default/user/bulk_register
>
> It allows you to specify a list of emails and an email messages. Those 
> people will be registered and will receive the email with a link to 
> complete registration.
>
> Please send comments, suggestions for improvements, bug reports.
>
> Massimo
>

-- 
Resources:
- http://web2py.com
- http://web2py.com/book (Documentation)
- http://github.com/web2py/web2py (Source code)
- https://code.google.com/p/web2py/issues/list (Report Issues)
--- 
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to