[ZCM] [ZC] 394/ 1 Request "CMF - missing use cases for anonymous join"

Collector: Zope Bugs, Features, and Patches ... zope-coders@zope.org
Tue, 14 May 2002 09:02:24 -0400


Issue #394 Update (Request) "CMF - missing use cases for anonymous join"
 Status Pending, Zope/bug low
To followup, visit:
  http://collector.zope.org/Zope/394

==============================================================
= Request - Entry #1 by Anonymous User on May 14, 2002 9:02 am

How do I prevent a new user from joining the CMF portal?

http://cmf.zope.org/doc/FAQ/permissions/faq4 does not
address the issue because the user is still presented
with a join form.

Use case #1 is that portal is membership managed
behind a firewall for internal use and membership is closed.

Use case #2 is that portal is new, undergoing construction. Anonymous viewing is allowed,
but is not ready for membership.

Unchecking "Add portal member" in the security tab
of the portal root does in fact prevent anonymous
from joining.

On Tue, 2002-05-14 at 08:06, Jeffrey_Franks@i-o.com wrote:
>
>
>
> Yes, I had already done that, and I agree that this prevents anonymous
> from joining.
>
> However, it did not stop anonymous from obtaining a rendered join_form
> in his browser, and his expectations are that he has a form, and is able
> to join after filling it out. His expectations won't be met, and might get
> confused.
>
> I would prefer to not let the user get to the join form at all in this case.

The "Join" action is supplied by the 'portal_registration' tool;  you
can either delete the tool (especially in your first case, where TTW
joining is never going to be allowed) or modify the expression which
guards the action (e.g., guard it with the 'Add portal member'
permission).  In fact, that should probably be the default permission
for the action;  please create a tracker issue for this.

Tres.
--
===============================================================
Tres Seaver                                tseaver@zope.com
Zope Corporation      "Zope Dealers"       http://www.zope.com

==============================================================