Add register user function

[kevinpapst]

Add functionality for self-registration

[sideeffect42]

While I agree that a registration function is nice to have I disagree about it being enabled by default.
I would argue that in most situations where Kimai is used the users are managed by some person in the company or there is only one user at all.

I consider registration being enabled by default an unnecessary security hole that might give people access to Kimai that shouldn't.
In addition self-registration should be easy to enable or disable.

The procedure to disable self-registration described in the docs didn't work for me.
Are there any additional steps required after adjusting the configuration?

I had to patch the .htaccess to ensure no new users could register:

RewriteRule ^\w+/register - [F]  # forbid self-registration
RewriteRule ^\w+/resetting - [F]  # forbid password reset

[kevinpapst]

Okay, I have to adjust the documentation I guess.
Please try to execute bin/console cache:clear so the new configuration will be used.

Depending on your setup, you might have to switch the user in order to re-generate the cache, please check the UPGRADING docs on how to do that.

Regarding enabling/disabling feature, I think this is a crucial setting and should only be changeable by the administrator. But I'll check if its possible to add a one line config to enable/disable it in the local.yaml so it won't be lost during upgrade.

[kevinpapst]

@sideeffect42 I checked the documentation and you were right, it was not complete / outdated. I improved it, see the linked commits.

I also added two config settings that you can have in the file config/packages/local.yaml to be safe for upgrades, which can be used to disable password-reset and user-registration.

For now I will keep these features active by default, as disabling it is only a minimal change in one config file.

[sideeffect42]

@kevinpapst Thank you very much for your rapid response.
After clearing the cache it now works.

With the latest version I could successfully disable both registration and password resets by adding these lines to config/packages/local.yaml:

kimai:
    user:
        registration: false
        password_reset: false

Now I get a 404 page when going to the registration/resetting pages.

[kevinpapst]

Thanks for your quick feedback!
Please post any idea as new issue, I want to develop Kimai 2 together with the community and every feedback is highly appreciated.

[lock]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.