Close site so people can't add themselves as users
How to close the site so that users can't sign themselves up.
How can I make the site semi-closed, so users can't add themselves, but need my permission?
As a site administrator, or another user with the Manager role:
- Navigate to the Security configuration page in your Plone site's Site Setup panel:
/[your-site]/@@security-controlpanel
- De-select the check box next to Enable self-registration.
- Click Save.
This will ensure that only users with the Manager role can add new users.
This will also remove the 'Join' links everywhere automatically. You can still manually browse to '/join_form' to get the registration form, but you won't be able to submit the form successfully, so this isn't a security issue. If this worries you, customize the '/join_form' form so that it just presents a policy notice.
To add new users to the site after closing registration (as a site administrator, or another user with the Manager role):
- Navigate to the Users and Groups page in your Plone site's Site Setup panel:
/[your-site]/prefs_users_overview
- Click Add new user, and register the new user account.
How to do this in Plone 2 sites
Browse to the Zope Management Interface.
Click the Security tab.
Uncheck Acquire for Add portal member and only let the Manager role have the permission. This will make sure only people that are Managers can add new users.
This will also remove the Join links everywhere automatically. You can still manually browse to /join_form to get the registration form, but you won't be able to submit the form successfully, so this isn't a security issue. If this worries you, customise the form so that it just presents a policy notice.
The way to add users after doing this is to log in as a Manager, and go to Portal Setup → Users/Groups Administration.