[Zope-CMF] How do I prevent join request?

Tres Seaver tseaver@zope.com
14 May 2002 08:25:27 -0400


On Tue, 2002-05-14 at 08:06, Jeffrey_Franks@i-o.com wrote:
> 
> 
> 
> Yes, I had already done that, and I agree that this prevents anonymous
> from joining.
> 
> However, it did not stop anonymous from obtaining a rendered join_form
> in his browser, and his expectations are that he has a form, and is able
> to join after filling it out. His expectations won't be met, and might get
> confused.
> 
> I would prefer to not let the user get to the join form at all in this case.

The "Join" action is supplied by the 'portal_registration' tool;  you
can either delete the tool (especially in your first case, where TTW
joining is never going to be allowed) or modify the expression which
guards the action (e.g., guard it with the 'Add portal member'
permission).  In fact, that should probably be the default permission
for the action;  please create a tracker issue for this.

Tres.
-- 
===============================================================
Tres Seaver                                tseaver@zope.com
Zope Corporation      "Zope Dealers"       http://www.zope.com