Opened 8 years ago

Closed 8 years ago

#1683 closed task (fixed)

Refuse to create an OSGeo UserID associated with the email address of an already existing user

Reported by: strk Owned by: sac@…
Priority: normal Milestone:
Component: SysAdmin Keywords: ldap, userid


In order to reduce possible email abuse we should forbid the creation of multiple users associated with the same email. This is to allow for email-based recognition of fake/malicious users, for example.

Also, users that create a new account with the same email might be just missing a "password reset" procedure instead, so it would be better to propose an alternative.

Change History (2)

comment:1 by strk, 8 years ago

When refusing to create such an account, a message should clearly state how to contact an administrator, as with the mantra-based registration in its current incarnation.

Note: See TracTickets for help on using tickets.