Question

I'm working in an environment where I need to be able to control who is able to register to edit (and in a few cases view) webs/topics. What I'd like to do is set it so only certian groups can register new users. Would setting the TWikiRegistration Page to only be viewable by the specified groups work?

Environment

-- JeffersonCowart- 01 Mar 2005

Answer

Registration is normally instigated by the anonymous user, so restricting that page would require unusual workflow of being logged in by a user in order to register another. It would work though.

The upcoming DakarRelease has the beginnings of a code hook for ApprovingRegistrations. See RegisterDotPm for details.

-- MartinCleaver - 01 Mar 2005

We are using this for some internal department documentation so we know the list of users who need accounts.

-- JeffersonCowart - 01 Mar 2005

Then the best thing to do is to BulkRegister them. BulkRegistration is a feature of DakarRelease (or it will be if I can work out why the test harness has broken ) .

-- MartinCleaver - 01 Mar 2005

Setting the TWikiRegistration Page to only be viewable by a specified groups would work. Note that this is security by obscurity since someone could dowload TWiki, study the code and create a new registration page that calls the register script.

However, what about this approach: Let anyone register & keep the Main web and TWiki web open to all. Lock down other webs to specific groups. When a new user registers, an admin would need to add that user to one of the groups.

-- PeterThoeny - 06 Apr 2005