id summary reporter owner description type status priority component severity resolution keywords cc release 843 Make admin approval required for account registration anonymous "While the account manangement itself is quite nice, it looks like just everyone can register some account without it beeing checked at all. What I would suggest is a (configurable) combination of those mechanisms: * captcha authentication to prevent robots from creating accounts * email verification links to the email entered * admin approval of accounts Also passwords should be stored within the database, so that it could be made easier for existing projects to incorporate trac into their user schemes." enhancement new normal AccountManagerPlugin normal user register prevention admin Thijs Triemstra sukender@… Tim Niemueller 0.11