| 324 | === !EmailVerificationModule === |
| 325 | '''Package''':: acct_mgr.web_ui |
| 326 | |
| 327 | If you enable this, users will be sent an email with a verification code to enter, to approve it is really their own email address: |
| 328 | |
| 329 | {{{ |
| 330 | [components] |
| 331 | acct_mgr.web_ui.EmailVerificationModule = enabled |
| 332 | }}} |
| 333 | |
| 334 | Until they entered the verification code on the URL sent with the email, their permissions will be restricted (even if they have the ''TRAC_ADMIN'' privilege, they won't be able to access anything exceeding the standard privileges of ''authenticated'' users). |
| 335 | |
| 336 | Note that with the current code, this will only happen if an email was specified - but this is not enforced on registration. In other words, if some user registers w/o specifying an email address, this will be possible - no verification will be done, but the account will be created anyway. If you want to enforce entering a valid email on registration, there's a patch for this attached to ticket #5509 you could use (read more there). Be warned that it is not thoroughly tested yet - so if you use it, feel free to add your comments to that ticket :) |
| 337 | |
| 338 | |