Hi Michael,

Just did some tests and i can confirm that tis is an issue. After registration for my blog using a different mail address and after confirmation, I can't login to my blog. I've checked the database using PHPAdmin and the registration in the database is correct. 

@incomedia: could you please look into this issue?

Regards,

Robert

Hello both

If it is the self-registration we are talking about, then it is correct that it is stored in the database.

But before the login can be used, you have to accept the user in the admin panel and then you also have to "handshake" the database with the X5 and then upload the project - then the new user can login.

Kind regards

John S.

PS if you think it could have been made in a more userfriendly way, then I agree.

PPS if it is another thing you mean then my apologize

Hi John, 

Yep it's the self-registration and I did activate the new account and in the control pannel the user registers as accepted. Doesn't work as expected though...

Regards, 

obert

Hello Rbbrt

You also have to update the users ( syncronize ) in X5 and then upload your project. The user will not be active before this.

It is because the users are not read from the database, but is put in a php-file. This happens when you syncronize the data and then the php-file has to be uploaded.

Hope you are helped by this.

Kind regards

John S.

Hi Rbbrt.

It is definitely not the right way it is supposed to work. You should be able to log into your website as a new user if you register and the validate your registration through the email you received.

Would you mind sharing the URL to one of your test websites where I can test this personally? Since from my tests on a new project this doesn't happen

Thank you

Stefano

Hi Stefano,

Of course. Go to https://www.schotlandopmaat.nl and click on 'blog' which is at the top of the page.

Regards,

Robert

Hi Stefano,

this is what the dashboard tells me...

Regards,

Robert

Hi Rbbrt.

Thank you for the result.

I will now proceed to conducting more tests on a new project. In the meanwhile, would it be possible for you to attach here a test project that shows this exact issue so that I might test there as well?

Thank you

Stefano

Anything new about this ?

Should it be possible for a user to selfregister and later login WITHOUT any interaction from the Admin/webmaster ?

Kind regards

John S. 

Hi John.

Yes, this is already possible. The automatic registration with email confirmation allows the user to be registered without needing to be manually approved by the website owner.

Let me know should you find this not to be working as expected

Thank you

Stefano

What is really kind of worriesome, is that the user can be entered in by the admin, without a registration. I want the user to register, then be able to log in. This is the only way it will work well.

Hi Michael.

The user can be entered in by the admin only if said Admin has direct access to your project, adds the User in the project and then re exports the whole thing.

This makes it so that it must really be you that inserted him, with low risk of errors.

Hope I've been helpful

Stefano

Hello Stefano

In the manual is still : 

To keep the list of users registered with WebSite X5 constantly up to date, you have to do the following:

▪Open the Access Management window in Step 1 - Website Settings | Advanced.▪Click on the Update the list of users who have registered online button in the Users section: the details of the users who have registered automatically on the Internet are downloaded and added to the Automatic Registration group. After having updated the user list, with the Update the list of users who have registered online button,  the operations carried out on the Users will take effect only after the website has been published online. This means, for example, that the list of downloaded users will not be removed from either the online Control Panel or the WebSite X5 Manager app until the website is republished online.

The user can be registered BUT :

When a user register and either is accepted by the Admin of by himself via mail : Is it then possible for this user to access a restricted page OR does the webmaster still have to upload the site before locked pages can be accessed by new users.

My question was : 

Should it be possible for a user to selfregister and later login WITHOUT any interaction from the Admin/webmaster ?

And your answer was - YES.

Either there is a wrong explanation in the userguide, or your answer is not correct.

I try again : 

Should it be possible for a user to selfregister and later login WITHOUT any interaction from the Admin/webmaster ?

Aĺl, firstly I would agree that the way X5 manages users, permissions and access / security could be improved. It also comes down to how you want to manage your users and group associations with what is described in the manual sounding like a poor attempt of how to do this.

However, Stefano is correct, that once a user self registers and performs the validation step by clicking on the link in the email, they CAN have full access to the website snd restricted pages without any involvement from the administrator.

Now when I say CAN, X5 enables you to define multiple groups of users i.e. Admistrators, Managers, Members, Volunters and to enable auto registration. The users can be setup in Step 1 - Access as belonging to specific groups or managed as per the instructions in the manual to be placed in specific groups. These users are then stored within and managed via a file, which yes requires you as the administrator to re-export the website.

When a user Auto Registers they are stored in the Members table in the database and (I believe, but would have to check) assigned to the Auto Registration Group. In Step 3 - Map View you define which pages will be Locked for access and what groups are allowed access. By selecting the Auto Registation Group the user is allowed to auto register, validate and then have access to those pages. However, if you are going to have different groups of members and access, then the administrator needs to manage this today via the steps outlined in the manual. One reason for doing this would be to have different classes of membership that could be purchased as Digital products off the website, once payment is confirmed then the administrator would move the user to the appropriate group. Again this is all not ideal or perfect but there are several ideas for improvement that could be defined.

At the end of the day, it comes down to how you want to manage access, users and groups for your website. There is the low touch Auto Registration process to the more involved Administrator process. Anything more than this for assignment, expiry, automation...etc. are idea posts or hacks with their own onerous level of management.

Kind Regards!

Dave