OK but notice, anybody, not even logged in, can already register using 
somebody else's email address and that person would receive an unwanted 
email with a link to verify their email. Unless 
registration_requires_approval is set False.

So perhaps the condition should only kick in if 
registration_requires_approval is False.

On Sunday, 28 June 2015 09:57:17 UTC-5, Anthony wrote:
>
> I don't think this should be exposed by default for all users -- it should 
> be disabled by default and only enabled when done so explicitly by the 
> developer. I would think you would only want to expose this kind of 
> functionality to admin/trusted users -- otherwise, you are providing a way 
> for users to spam people and load your db.auth_user table with an unlimited 
> number of phantom registrations. A few other suggestions:
>
>    - Provide an easy API for specifying a required Auth role or set of 
>    roles that are allowed access to this functionality (as I think in most 
>    cases you would want to restrict its usage) -- something like 
>    auth.settings.bulk_register_roles.
>    - Add an option to specify a limit on the number of users that can be 
>    registered at a time (with some reasonable default, such as 100).
>    - Maybe provide a script or a function in admin/appadmin that can 
>    clean up db.auth_user by expunging bulk registrations that were not 
>    completed within some (configurable) time frame.
>    - Apply auth.settings.formstyle to the form.
>    
> Anthony
>
> On Sunday, June 28, 2015 at 10:19:46 AM UTC-4, Massimo Di Pierro wrote:
>>
>> Hello web2py users,
>>
>> a new feature is in trunk, please help us test it.
>> Originally developed here https://github.com/web2py/web2py/pull/985 as 
>> "invite" has been renamed as "bulk_register". It is available to all web2py 
>> applications at this user:
>>
>> http://127.0.0.1:8000/welcome/default/user/bulk_register
>>
>> It allows you to specify a list of emails and an email messages. Those 
>> people will be registered and will receive the email with a link to 
>> complete registration.
>>
>> Please send comments, suggestions for improvements, bug reports.
>>
>> Massimo
>>
>

-- 
Resources:
- http://web2py.com
- http://web2py.com/book (Documentation)
- http://github.com/web2py/web2py (Source code)
- https://code.google.com/p/web2py/issues/list (Report Issues)
--- 
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to