18 Aug
2016
18 Aug
'16
1:53 p.m.
Hi all,
The day after upgrading http://selfbus.myxwiki.org to 8.2.1, I found a
handful of spammer accounts that were created as local users in the wiki.
The wiki was configured to
* Only an admin can send invitations to join this wiki
* Both global and local users are available in the wiki
Interestingly this still allows new users to be registered.
Also strange is that the registration captcha does not show as it should
also.
The wiki is now set to allow only global users, so there is no immediate
problem.
I only wanted to report my observations, as it looks like a bug in xwiki
to me.
Kind regards,
Stefan
18 Aug
18 Aug
2:01 p.m.
Hi Stefan,
On 18 Aug 2016, at 13:53, Stefan Taferner
<taf(a)porscheinformatik.at> wrote:
Hi all,
The day after upgrading http://selfbus.myxwiki.org to 8.2.1, I found a handful of spammer
accounts that were created as local users in the wiki.
The wiki was configured to
* Only an admin can send invitations to join this wiki
* Both global and local users are available in the wiki
Interestingly this still allows new users to be registered.
Also strange is that the registration captcha does not show as it should also.
The wiki is now set to allow only global users, so there is no immediate problem.
I only wanted to report my observations, as it looks like a bug in xwiki to me.
Whether someone can create an account depends on the “register” permission for guest. This
is what you need to configure for your wiki.
Global/Local user simply defines where the user accounts can be created (on the main wiki
- ie global -, or on the local wiki - ie local).
On the main wiki we allow everyone to register accounts :)
Thanks
-Vincent
Kind regards,
Stefan
2:06 p.m.
Indeed "Only an admin can send invitations to join this wiki" is quite
misleading. This option is only about main wiki users in a farm use
case. It's not related to how new users are created.
On Thu, Aug 18, 2016 at 2:01 PM, Vincent Massol <vincent(a)massol.net> wrote:
Hi Stefan,
--
Thomas Mortagne
On 18 Aug 2016, at 13:53, Stefan Taferner
<taf(a)porscheinformatik.at> wrote:
Hi all,
The day after upgrading http://selfbus.myxwiki.org to 8.2.1, I found a handful of spammer
accounts that were created as local users in the wiki.
The wiki was configured to
* Only an admin can send invitations to join this wiki
* Both global and local users are available in the wiki
Interestingly this still allows new users to be registered.
Also strange is that the registration captcha does not show as it should also.
The wiki is now set to allow only global users, so there is no immediate problem.
I only wanted to report my observations, as it looks like a bug in xwiki to me.
Whether someone can create an account depends on the “register” permission for guest.
This is what you need to configure for your wiki.
Global/Local user simply defines where the user accounts can be created (on the main wiki
- ie global -, or on the local wiki - ie local).
On the main wiki we allow everyone to register accounts :)
Thanks
-Vincent
Kind regards,
Stefan
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
3004
days inactive
3004
days old
2 comments
3 participants
participants (3)
-
Stefan Taferner -
Thomas Mortagne -
Vincent Massol