SID-00221: Correct way to remove registration links

Status:	Answered	TWiki version:	4.2.3	Perl version:
Category:	CategoryRegistration	Server OS:	Some version of RedHat Linux	Last update:	16 years ago

Due to security concerns, my organization only wants IT administrators to register users. So, I need to find a way to suppress all appearances of links to the Registration form.

For the WebLeftBar, it appears that I could edit "WebLeftBarLogin" and remove the following:

%IF{"context registration_supported AND context registration_enabled" then="%MAKETEXT
{"or"}% [[%TWIKIWEB%.TWikiRegistration][%MAKETEXT{"Register"}%]]"}%

Will this suppress the registration link in the left bar in all cases? If I edit this file, will it survive upgrades, or should I edit something else?

Also, on the login screen, if one presses the 'forgot password' link, you get a popup that includes a registration link. I need to suppress that as well.

What is the correct way to do this?

I see that there are variables in the text string above called 'registration_supported' and 'registration_enabled'. Can I just change these values to prevent the registration link from ever being displayed in Twiki?

TWiki-4.2.3, Wed, 06 Aug 2008, build 17396, Plugin API version 1.2

-- LoriBrown - 25 Mar 2009

Discussion and Answer

You can disable registration in configure. This will hide the registration link.

Another approach is this:

• leave registration open for all users
• lock down content for edit on the whole site to an EditorsGroup
• an admin is monitoring new registrations and adds legitimate users to that group and removes other registrations.

-- PeterThoeny - 25 Mar 2009

In configure, I see an option to:

by turning this option off, you can temporarily disable new user registration. 
it will have no effect on existing users.
{Register}{EnableNewUserRegistration}    

Does this also disable site managers from adding new users from the form that we access from Main? Or does it just make it so that unregistered users never see a registration link or registration form? (we are seeking the latter outcome) Thanks!

-- LoriBrown - 25 Mar 2009

Both.

-- PeterThoeny - 25 Mar 2009

So turning this option off means that admins can't register anyone either?

-- LoriBrown - 25 Mar 2009

I understand that the purpose of Twiki is open collaboration, everyone is welcome, la la la. I get it. I agree with that concept and approach to work. But sadly, that is not what my customer wants. They live in mortal fear of any kind of unauthorized access, however benign, and any kind of computer security breach. So the only way we can even implement tools like this is if registration is in the complete and total control of IT sys admin personnel. It's not that we don't want to add users. We just are strictly required to complete certain documentation before people access these pages.

-- LoriBrown - 25 Mar 2009

There are many ways to configure TWiki. We can help you out with specific needs. We will contact you on how to proceed.

-- PeterThoeny - 25 Mar 2009

Apologies if I am putting this to a wrong place but does this method works for TWiki version 4.1.2?

I've recently been given the server to play with and it comes with 4.1.2 and I tried putting the {Register}{EnableNewUserRegistration} setting into the LocalSite.cfg and it doesnt seem to remove the link. Can anyone tell me if there is another way to disable registration links in version 4.1.2?

-- KenLiew - 2010-02-04

Make sure to specify as:

$TWiki::cfg{Register}{EnableNewUserRegistration} = 0;

-- PeterThoeny - 2010-02-04

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.