Registration codes not required for other groups, once a user subscribes to one group with a valid registration code. [#108973]

I noticed that if I create an account and I am required to join a group at the time of registration (promoting me to the role of student), this works fine. The groups are open groups, as I want to rely only on the code to validate the user's registration. The only problem: once the registration has been accepted for one group, a user can then subscribe to any other group on the site without a registration code. If you go to the group directory and subscribe to another group, the registration for that group is not required. I would like to enforce registration codes after the initial registration as well. Is this possible? Thank you for any help on this. Feel free to change the category of this issue to "feature request" if you feel that is more appropriate. However, the usefulness of registration codes seems greatly hindered if they are only enforced at the time a user creates an account.

Great module, by the way!

Comments

Comment #1

pwolanin CreditAttribution: pwolanin commented 13 January 2007 at 01:11

Category:

bug

» feature

The purpose of the module is to facilitate (not restrict) joining groups where there are very many groups on a site.

The module also only supports groups that are open or moderated, so there is nothing to stop a user form joining these groups. In this case, you only have possible security though obscurity by not listing groups in the groups directly.

Also, the codes are not meant to be very secure- the same code could potentially get shared with 100s of users.

If you want a module that (for example) uses more secure codes to allow users to join closed groups, I think you need to write or sponsor a separate module that has that functionality as the goal.