Changes between Version 95 and Version 96 of AccountManagerPlugin

Timestamp:

Oct 10, 2010, 10:24:47 PM (14 years ago)

Author:

Steffen Hoffmann

Comment:

update description according to latest development, refs #5509

AccountManagerPlugin

@@ -221 +221 @@
 Until they entered the verification code on the URL sent with the email, their permissions will be restricted (even if they have the ''TRAC_ADMIN'' privilege, they won't be able to access anything exceeding the standard privileges of ''authenticated'' users).
 
-Note that with the current code, this will only happen if an email was specified - but this is not enforced on registration. In other words, if some user registers w/o specifying an email address, this will be possible - no verification will be done, but the account will be created anyway. If you want to enforce entering a valid email on registration, there's a patch for this attached to ticket #5509 you could use (read more there). Be warned that it is not thoroughly tested yet - so if you use it, feel free to add your comments to that ticket :)
+This '''has been added as a strict requirement now''' as suggested by ticket #5509 to ''trunk'' code with changeset [9277], but was not enforced before, so verification only happened, if an email had been specified on registration. In other words, if some user registered w/o specifying an email address, this was possible and an unrestricted account was created without requiring further actions.
+
+Note that if you don't want to enforce entering a valid email on registration, you have to disable this component. An option for switching this off independently to restore the old behavior [comment:ticket:5509:15 was suggested], but has not yet been implemented.