We recently installed the Notify module and started to receive many complaints from members saying that they didn't want to receive so many emails. It seems that the default setting is to have the master switch and e-mail for new content "On" straight out of the box. The biggest issue is that there doesn't appear to be a way within the functionality of the module to turn Disable notifications for all users or for a default setting for new users. Of course this can be done via MySQL, but seems there should be a way within the module. Perhaps I'm missing something?

CommentFileSizeAuthor
#5 notify_new_user_default.patch1.72 KBmatt2000
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

matt2000’s picture

I don't think this is exactly what you're looking for, but it might help:

admin/user/user/notify

matt2000’s picture

Status: Active » Postponed (maintainer needs more info)
ratnesh aarohi’s picture

I have the same issue. In the register poage by default the
Receive email notifications of news posted to this site. Notifications are sent every 9 hours.
is ENABLED - which is misleading the subscribers to get notifications.
I would like have this disabled by default and let user tick it if they want.
Anyway to do this?

Also surprisingly while i have under permissions - access notify and administer notify - only enabled for the "ADMIN user" - the option to receive notification is enables and available to any user.
What do i need to do so that the option to recevie notification is only available to admin or any other specific users.

matt2000’s picture

Status: Postponed (maintainer needs more info) » Active

Add this line to notify.module :

if (!user_access('access notify')) return;

right after:

function _notify_user_reg_fields() {

which is at about line 136.

matt2000’s picture

Status: Active » Needs review
FileSize
1.72 KB

Here's a patch for both setting a default & checking anon access on the reg form. Also committed to dev version.

Leeteq’s picture

Was this committed only to the -dev version for D5, not D6 which this issue is about?
The time stamps on the main module page indicate no such update for the 6.x-dev version.

matt2000’s picture

ehh. It was committed to CVS head, which is now the Drupal 6 version, but apparently drupal.org doesn't know that. The CVS tree for this project was a mess when I inherited it, and then I made it worse, and then I made it better... but I still can't get a dev package generated for HEAD. I've posted a support ticket to the d.o wizards. Meanwhile, you can get CVS HEAD for the latest dev code.

mcurry’s picture

subscribe

Jody Lynn’s picture

Priority: Normal » Critical

This issue is critical. The current stable release of the module allows users to bypass its access control when they register for an account, and then they have no way of turning off their notifications.

This module is extremely broken until a new stable release is made, and it could be argued that it's a security concern.

matt2000’s picture

Please test the current 6x-dev release and report if the issue is present there, and if it is, I'll port the fix form HEAD, which probably need to be abandoned.

In any case, as soon as I get a few good reviews of the current dev, I'll roll a new release.

matt2000’s picture

Status: Needs review » Fixed

Fix is #5 to be released shortly.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.