[Moin-user] disabled new user creation, but still find new accounts?

Thomas tja at tja-server.de
Tue Mar 18 15:41:41 EDT 2008

R. Yu wrote:
> I'm using moin 1.5.7 as a personal CMS.  I've disabled new user creation by modifying userform.py,
> as described in the "clean solution" here:
> http://moinmo.in/FeatureRequests/DisableUserCreation
> The modification seemed to work:  if I tried to create a new user, I get a "new user accounts
> disabled" message and nothing is written to the user/data directory (which currently has write
> permission).
> However, whenever I check in my data/user directory after some period of time, I always find a
> bunch of new users in user/data--the user accounts are created, though the new users can't
> actually login.    I'm concerned that I've left a hole in my system for spammers, but for the life
> of me, I can't figure out how this happens.  Does anybody know how the new user accounts get
> created despite my changes to userform.py?

Why not using an ACL on the UserPreferencs page?
Works work me :)

More information about the Moin-user mailing list