#214 — Add setting per tracker to allow/disallow anonymous additions

StateResolved
Version:
—
AreaFunctionality
Issue typeFeature
SeverityImportant
Submitted byMaurits van Rees
Submitted onApr 22, 2009
Responsible Maurits van Rees
Target release: 1.2
Return to tracker
Last modified on Jun 22, 2009 by Antti Savolainen
The workflow arranges that anonymous persons can add issues and responses.
It would be handy to have a setting per tracker to allow or disallow this. This could just set the required permissions in manage_access behind the scenes.

Case in point: the last few weeks two issues in this tracker have received quite a lot of spam responses. I went to the ZMI to disallow anonymous to add anything on those two specific issues. I might as well set it on the tracker. And I might as well make that easier with a setting on the edit form.

An idea for the future.
Added by(anonymous)onMay 19, 2009 03:06 PM
I am also facing similar issue. Any anonymous user can add and reply hence lot of junk get into it.
Added byMaurits van ReesonMay 22, 2009 11:50 PM
Issue state: Unconfirmed → Resolved
Severity: Medium → Important
Responsible manager: (UNASSIGNED) → maurits
Target release: None → 1.2
I added a state 'restricted' to the poi tracker workflow; in this state anonymous can view issues and responses, but only members can add them. The default stays the same: new trackers are open for submissions from everyone.

So to close down a tracker for anonymous additions, you just need to do the 'restrict tracker' transition to change the state of the tracker into 'Only members can submit'.

Added on the subversion trunk in r86634. Will be in the Poi 1.2.4 release.
Added byAntti SavolainenonJun 22, 2009 07:07 PM
Rather than changing the workflow I would suggest adding a captcha. As far as I've understood the use cases in most cases suggest anonymous adding.

No responses can be added.