feat: Option to disallow usergroup and role combinations#186
Conversation
|
Seems like it would be good to get this into a release, soon. @Jako are you able to take a peek at it for approval? |
|
This is a very useful addition for security reasons. I would also add a ‘usergroupsFieldAllow’ option. |
How should these two settings interact do you think, @Jako? |
|
For security reasons, a whitelist option is the better choice. However, a blacklist option is also useful, as it ensures that the ‘Administrator’ group can be excluded by default. I would check the blacklist option first and then the whitelist option. |
|
@Jako I've added this change. |
- Add an option to disallow/allow specific usergroups and usergroup role combinations during register, when the user group(s) can be specified with a form field [#186] - Disallow the `Administrator` group during register, when the user group(s) can be specified with a form field [#186] - Fix warning 'Creation of dynamic property modx is deprecated' - Update lexicon
- Add an option to disallow/allow specific usergroups and usergroup role combinations during register, when the user group(s) can be specified with a form field [modxcms#186] - Disallow the `Administrator` group during register, when the user group(s) can be specified with a form field [modxcms#186] - Fix warning 'Creation of dynamic property modx is deprecated'
|
I have added this commit, some lexicon changes, a warning fix and the transport package in #187 |
|
#187 just needs an approve by somebody. |
|
Bah. Sorry. I missed that PR. |
3 participants
This adds a new
usergroupsFieldDisallowverifier option to limit which groups a user can register for when using theusergroupsFieldoption.