Block new registations to rocketchat

[Julime]

In our team we would like to block the registration of external users. New users should only join with an invite (#194)

[nrunde]

+1
There should be an option to toggle this behavior in a global settings section.

[engelgabriel]

👍 thats right!

We need the admin config page ASAP. I'll bump the priority on that!

[Julime]

Maybe there should be an admin account for settings like this?

[engelgabriel]

Depends on #222

[marceloschmidt]

Copying over a comment from #224:

@graywolf336
When adding users, will it be an invite style? As that's how I'm used to it but also just being able to add people without them confirming an invite would help for temporary users. Maybe even ability to add users and make them valid for one week only and expire their login until an admin/person with permissions extends their stay.

[graywolf336]

Invites are covered in #194, but the temporary users feature would still be a nice addition.

[marceloschmidt]

Can this be closed now that we have Accounts_ManuallyApproveNewUsers settings? I think we might need to send an e-mail when new accounts are created, though.

[graywolf336]

I would still like the option to fully disable new registration for my instance, that way people aren't even given the option to do it.

[marceloschmidt]

Okay! Let's do that and keep this issue open, then.

Marcelo Schmidt

On Wed, Sep 16, 2015 at 4:00 PM, graywolf336 [email protected]
wrote:

I would still like the option to fully disable new registration for my
instance, that way people aren't even given the option to do it.

—
Reply to this email directly or view it on GitHub
#195 (comment)
.

[Theaxiom]

I agree with this, especially since all of my accounts are managed via LDAP.

[crud42]

Is it possible to disable the "Register new Account" on the login page?

Otherwise, i agree that this must be possible, because right know everyone could enter the chat
if mail confirmation is disabled.

[Theaxiom]

This is a critical issue if you are managing accounts via LDAP, is there anyone who can focus on completing this? We are running Rocket.Chat in a corporate environment and they will not let it pass through security approval if we are not able to manage the accounts strictly via LDAP.

[yonkeltron]

Agreed that this is a must-have feature for users in corporate environments and beyond.

[Spirotot]

+1, this would be a great feature/ability to have...

[icode]

+1

[engelgabriel]

Let's move this to the top of the queue

[TinajaLabs]

+1

• disable public registration, or
• have admin confirm/complete registration, or
• admin must register new user, send confirming email to new user

[doits]

👍 Critical for LDAP management of users

[MayMeow]

+1

[gt50]

+1

[graywolf336]

To everyone who's gave a plus one, what would be your ideal way to handle this?

[gt50]

I would be happy with an "Allow new user registration" true/false option in the administrative area which would disable the "Register a new account link" on the main page and the submit button on the registration page (if they manage to get there somehow).

LDAP or having the administrator create the accounts would be used in lieu of this. I want to use rocketchat for my small business. In its current form I could use it, but I could not make it available on the internet because anyone could register a new account.

[doits]

I'd see it same like @gt50, to summarize:

• Option "Disable local user registration" in admin area "Settings - Accounts - Registration"
• If enabled:
  • "Register a new account link" on login page is gone
  • Registration action in backend does not create a new account, even when it receives some data
  • As a bonus: The "Register a new account link" is replaced by a disabled link saying "New user registration currently disabled" and that msg can be customized or left blank, too (maybe over engineering for now)

[joubertredrat]

+1 this is a very nice feature

[engelgabriel]

Let's create the following settings:

Registration Form [Public, Disabled, Secret URL]
Registration Form Secret URL (string)
Registration Form Link Replacement Message (string)
Registration with Authentication Services (boolean)

[Theaxiom]

Great idea!

Thanks,
Travis Rowland
http://travisrowland.com
http://linkedin.com/in/travisrowland
http://about.me/travisrowland

---

This e-mail is privileged and confidential. Do not forward, copy or print
without authorization. If you are not the intended recipient of this
E-mail, you are hereby notified that any dissemination, distribution or
copying of this message is strictly prohibited. If misdirected, please
delete and notify the sender by e-mail at [email protected].

CAUTION: E-mail sent through the internet is not secure and could be
intercepted by a third party. For your protection, avoid sending
identifying information, such as account numbers or social security numbers.

On Fri, Nov 27, 2015 at 8:49 AM, Gabriel Engel [email protected]
wrote:

Let's create the following settings:

Registration Form [Public, Disabled, Secret URL]
Registration Form Secret (string)
Registration with Authentication Services (boolean)
Registration Explanation Message (string)

—
Reply to this email directly or view it on GitHub
#195 (comment)
.

[engelgabriel]

Done via #1510

Please test and let me know if we can close this issue.

[ghost]

Hello.

Has this been fixed? I'm asking because i do not find the setting where i can disable registration.

thanks and cheers
t.

[engelgabriel]