Return-Path: Delivered-To: apmail-incubator-jspwiki-dev-archive@locus.apache.org Received: (qmail 80356 invoked from network); 5 Dec 2007 19:21:11 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 5 Dec 2007 19:21:11 -0000 Received: (qmail 17934 invoked by uid 500); 5 Dec 2007 19:21:00 -0000 Delivered-To: apmail-incubator-jspwiki-dev-archive@incubator.apache.org Received: (qmail 17921 invoked by uid 500); 5 Dec 2007 19:21:00 -0000 Mailing-List: contact jspwiki-dev-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: jspwiki-dev@incubator.apache.org Delivered-To: mailing list jspwiki-dev@incubator.apache.org Received: (qmail 17912 invoked by uid 99); 5 Dec 2007 19:21:00 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 05 Dec 2007 11:21:00 -0800 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of Janne.Jalkanen@ecyrd.com designates 193.64.5.122 as permitted sender) Received: from [193.64.5.122] (HELO mail.ecyrd.com) (193.64.5.122) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 05 Dec 2007 19:20:39 +0000 Received: from [192.168.10.162] (cs181005170.pp.htv.fi [82.181.5.170]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by mail.ecyrd.com (Postfix) with ESMTP id 6D2014826A for ; Wed, 5 Dec 2007 21:20:24 +0200 (EET) Mime-Version: 1.0 (Apple Message framework v752.3) In-Reply-To: References: <15cc92000712032030h507d885dt120819ca5e18b894@mail.gmail.com> <3988C531-E4E0-4B6D-B674-6718CC147D95@ecyrd.com> <15cc92000712041230x5481d7eeua2118b511366bcc6@mail.gmail.com> <73CAEFCD-2D26-4E03-9606-0117FCE6A72B@ecyrd.com> Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: <01A77ED6-94C3-480A-86E7-8D821D9C86E9@ecyrd.com> Content-Transfer-Encoding: 7bit From: Janne Jalkanen Subject: Re: By Invitation Only Registration Date: Wed, 5 Dec 2007 21:20:16 +0200 To: jspwiki-dev@incubator.apache.org X-Mailer: Apple Mail (2.752.3) X-Virus-Checked: Checked by ClamAV on apache.org How about protecting UserPreferences.jsp through your web.xml or .htaccess? Then share the username/password. /Janne On 5 Dec 2007, at 20:44, Volkar, John M. wrote: > I have a public facing wiki, I want registration to be by invitation > only. > > Any suggestions? > > ... > > I was thinking a patch along the lines of: > > Adding a property: > jspwiki.registration = open | closed | invitation, default is > 'open'. > > Modifying the default template to conditionally show the > registration UI > elements based on the property. > > For 'invitation' some additional UI elements would be added (a few > text > strings and an input-box) > > When the user attempts to register, the "invitation-code" would be > checked against another new property: > jspwiki.registration.invitationCode= > > Which could have one of two values > static:XXXcodeXXX > code-file:JSPWiki-InvitationCodes.txt > > Where static: is a single shared "community code", if compromised the > admin must change it and restart. > > Where code-file: is text file of name:code pairs. > > > Any thoughts on this? Am I making this harder than it needs to be? > > Regards, > John Volkar