logged-in user + /user/register -> access denied

I don't see any harm in showing a logged in user the register page again. This has caused a lot of confusion for users on some of my Drupal sites. It would be helpful if the message was even friendlier... i.e. "You are already logged in." with a link to logout.

This issue comes up all the time for me. At this point, I'd settle for just being able to customize the message that shows up on this page.

I'm confused... I have been building a Drupal site for the last five days (on and off again) and I had no problem getting to the registration page while I was logged in, I even put a Members menu link that went to that page instead of a blatant login block.

Then I made a change (which I have reverted) removing the navigation block for unregistered users) and now I am unable to get to the registration page where I used to be able to see three tabs - my account, login, request password. This is while logged in as the Admin account...?

I thought this was a bug and just got round to looking into what I'd done to cause it:

What I get is:

a) Going to user/register when logged in gives access denied, although I can live with this as its not a likely situation (my site has no register links for authenticated users)

b) Much more seriously pressing submit to login after filling out username and password sends you back to /user/login and gives access denied which would give users the initial impression they're not logged in properly although they are.

Sounds very much related to the issue on this thread and I think may have occured when I turned clean urls on although not sure on that :-(

Anyone help me with this?

This is just a "works for me" hack: in user.module, function user_menu, around line 715 where the user/register item is defined, just take out the !$user->uid part of the access check.

user_register_undenied.patch:

--- user.module.original        2007-08-01 09:38:57.000000000 -0700
+++ user.module 2007-08-01 09:39:05.000000000 -0700
@@ -712,7 +712,7 @@ function user_menu($may_cache) {
       'callback' => 'drupal_get_form', 'callback arguments' => array('user_login'),
       'access' => !$user->uid, 'type' => MENU_DEFAULT_LOCAL_TASK);
     $items[] = array('path' => 'user/register', 'title' => t('Create new account'),
-      'callback' => 'drupal_get_form', 'callback arguments' => array('user_register'), 'access' => !$user->uid && variable_get('user_register', 1), 'type' => MENU_LOCAL_TASK);
+      'callback' => 'drupal_get_form', 'callback arguments' => array('user_register'), 'access' => variable_get('user_register', 1), 'type' => MENU_LOCAL_TASK);
     $items[] = array('path' => 'user/password', 'title' => t('Request new password'),
       'callback' => 'drupal_get_form', 'callback arguments' => array('user_pass'), 'access' => !$user->uid, 'type' => MENU_LOCAL_TASK);
     $items[] = array('path' => 'user/reset', 'title' => t('Reset password'),

I think this is a safe change, since function user_register has its own access checks, and it even conveniently does the drupal_goto to your own profile page for users who do not have permission to create other new users.

Make sure you clear your menu cache after doing this.

-- Steven N. Severinghaus

I needed a solution since I need to link to registration from within a flash file... and I don't know the first thing about flash (can't edit or change it).
So I looked at workflow-ng and made a workflow to do the redirect, firing when user is going to view a page and comparing the page url to "register". I can post the export data here if anyone is interested.

I'm still wondering if this is overkill, but I don't know how much of a difference it will make. And my sire is small, not going to be very community based so it may not be so much of a problem.

has anyone got a method for doing this on Drupal 6.2?

can anyone provide a patch (or a mini
module) for Drupal 5.7 ???
Thank you.

Our way toward this is change user_access to TRUE. that way any one can access the page.
'callback' => 'drupal_get_form', 'callback arguments' => array('user_login'),
'access' => !$user->uid, 'type' => MENU_DEFAULT_LOCAL_TASK);

'callback' => 'drupal_get_form', 'callback arguments' => array('user_login'),
'access' => TRUE, 'type' => MENU_DEFAULT_LOCAL_TASK);

though, very worry about this could lead to security issue. if it were, pls point us out.

Thanks for this tip, i used the workflow-ng method you described and it worked like a charm! Just the solution we needed.

If your using the Boost module it sets the DRUPAL_UID cookie if logged in. Add this code to redirect user/login and user/register to the homepage.

  RewriteCond %{HTTP_COOKIE} DRUPAL_UID
  RewriteCond %{REQUEST_URI} ^/user/login [OR]
  RewriteCond %{REQUEST_URI} ^/user/register
  RewriteRule ^user/.* / [L,R=307]

Place it right below

  # If your site is running in a VirtualDocumentRoot at http://example.com/,
  # uncomment the following line:
  # RewriteBase /

and above the boost rules

I needed to redirect logged in users visiting the register page to a custom page explaining why they can't access the register page, instead of just saying they can't. This little function in a custom module does the trick: (it redirect to node/10)

function mymodule_init()
{
    global $user;
    if ($_REQUEST['q'] == 'user/register' && $user->uid > 0)
    {
        drupal_goto('node/10');
    }
}

when this module is enabled the user account pages can not be accessed,
I have 'user' as the redirect location
browser says
Too many redirects occurred

How about simply creating a block, putting in there something like "You can't register because you are already logged in!", and then placing that block below the content only on the user/register page, and only accessible to authenticated users? That way there's no fiddling with custom code or hacks.
You could even use css to hide the content section of that particular page (the part that says "Access Denied") using {display:none} if your theme provides a unique body class for that page.

Cheers,

Albert.

If you are using the AutoAssignRole module, you will need to change the access callback for your custom paths as well. In D6, I have a special path for artists:

function helper_menu_alter(&$items) {
  // Display user registration for people logged in
  $items['user/register']['access callback'] = 'helper_register_access';
  $items['user/register/artist']['access callback'] = 'helper_register_access';
}
function helper_register_access() {
  return variable_get('user_register', 1);
}