user->register policy is working even if it is not grated to anonymous user.

Author Message

Romeo Antony

Tuesday 14 December 2010 2:27:37 am

Hi,

I am usig ezp ver 4.3.0

For anonymous user role, I havn't granted user->register policy, still , anonymous users can register within the siteaccess. Anonymous users been allowded only to anonymous role.

Anywork around?

Damien Pobel

Tuesday 14 December 2010 2:46:03 am

Hi Romeo,

This is because user/register is in RoleSettings/PolicyOmitList array in site.ini. If you remove it, anonymous won't be able to use user/register unless the right policy is set.

Cheers

Damien
Planet eZ Publish.fr : http://www.planet-ezpublish.fr
Certification : http://auth.ez.no/certification/verify/372448
Publications about eZ Publish : http://pwet.fr/tags/keywords/weblog/ez_publish

Marcel Marnet

Tuesday 14 December 2010 11:30:39 pm

Hello Romeo,

have a look at the following site.ini lines (line 644...):

# [SiteAccessRules]
# Rules[]
# # Set access policy to allowed
# Rules[]=access;enable
# # Special syntax which means any module
# # This means that for now all modules are enabled
# Rules[]=moduleall
# # Set policy to denied
# Rules[]=access;disable
# # If content/search module use current policy (denied)
# Rules[]=module;content/search
# # If rss module use current policy (denied)
# Rules[]=module;rss

if you want to disable accessing user/register generally just add the following lines to your override site.ini.append.php

[SiteAccessRules]
Rules[]
Rules[]=access;disable
Rules[]=module;user/register

with best regards,

Marcel

Romeo Antony

Wednesday 15 December 2010 4:39:51 am

Thanks a lot Marcel and Damien. I got it.

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.