Support for logintoboggan pre-authenticated role [#474986]

When logintoboggan is configured with a pre-authenticated role, it allows any user to register and set their password when they log in, but puts them in a special "not yet authenticated" role which limits their privileges. When the user validates their email address, they are removed from this role and get full access to the site.

This patch removes users from the pre-authenticated role if they have accepted an invitation by code. Since they received the invitation, they must have access to the email account where it was sent, so accepting the invitation verifies the address just as well as Logintoboggan's validation emails do.

Comment	File	Size	Author
#1	invite_no_autoaccept.patch	2.59 KB	scottgifford
	invite_logintoboggan_role.patch	742 bytes	scottgifford

Comments

Comment #1

scottgifford commented 28 May 2009 at 04:17

Status	File	Size
new	invite_no_autoaccept.patch	2.59 KB

Also, if invite_accept is treated as confirming an email address, it should only be called if the user has explicitly accepted an invitation by ID, and not if the user registered and we found an invitation for them lying around. This patch implements that change.