Feature #12855

Sometime,we need limit register email address

Added by Jinyi Cui almost 5 years ago. Updated almost 5 years ago.

Status:NewStart date:
Priority:NormalDue date:
Assignee:-% Done:

0%

Category:Accounts / authentication
Target version:-
Resolution:

Description

When you use redmine in the compay,you coworker will register account themselfs, you need limit email address,only can register,redmine can't check the email like '' now.

you can find the regular expression in models/user.rb

validates_format_of :mail, :with => /^([^@\s]+)@((?:[-a-z0-9]+\.)+[a-z]{2,})$/i, :allow_blank => true

make the '@compay.com' limit can be config maybe is a good idea.


Related issues

Related to Redmine - Defect #12106: Users can easily use any (not yet used) email address for... New
Duplicated by Redmine - Feature #14341: Ability to self-register only from ceratain domains Closed

History

#1 Updated by Joshua DeClercq almost 5 years ago

Can this be achieved by limiting registration to LDAP...?

#2 Updated by Jinyi Cui almost 5 years ago

For example, you company have 300+person, only register use can create a issue, create 300+ user need a lot of time, so you let user register themselfs, but you do not want other person register, cause redmine is open for Internet

#3 Updated by Joshua DeClercq almost 5 years ago

I see what you're saying. I'm wondering if you could disable self-registration entirely, configure LDAP access in Redmine settings to your work network, and have users created on-the-fly the first time they attempt to sign into Redmine.

LDAP would basically let Redmine authenticate users with their standard work/email credentials. If they don't exist on your mail server, they can't proceed.

The last LDAP configuration I looked at used a plugin to sync the Exchange server's address book to Redmine's user list, automatically creating user accounts for everyone, which is different from the on-demand creation I described above. I don't know enough about LDAP+Redmine to give you step-by-step instructions, but I do believe what you want to do is possible somehow through this path. Odds are very good that whatever your company is using for email offers LDAP access.

#4 Updated by Jinyi Cui almost 5 years ago

yes,I can solve this problem directly by modify code,however,if there have this function is a good thing

#5 Updated by Harry Garrood almost 5 years ago

I'm wondering if you could disable self-registration entirely, configure LDAP access in Redmine settings to your work network, and have users created on-the-fly the first time they attempt to sign into Redmine.

This is possible without using any plugins -- it's what the Redmine instance I use does

#6 Updated by Go MAEDA 6 months ago

  • Duplicated by Feature #14341: Ability to self-register only from ceratain domains added

#7 Updated by Go MAEDA 6 months ago

  • Related to Defect #12106: Users can easily use any (not yet used) email address for their account (potential security issue) added

Also available in: Atom PDF