LOOK THIS FORUM TOPIC: http://drupal.org/node/62620

The group owner can "add subscribers".
Ok this is nice, but i really dont want group owners to be able to add every damn user to its gorup. I want it to be so, that only users themselves must subscribe and the group manager can only decide if he lets them in or not.
Is there any fix for my problem ? I didnt find anything on og setting pages.

I know a module with what i culd block the URLs, but it's not nice to do it that way.
http://www. .net/portaal7/?q=og/users/1/add
http://www. .net/portaal7/?q=og/users/2/add
http://www. .net/portaal7/?q=og/users/3/add
And to only delete the button with theme hack is also not very neat... and not very secure.

Comments

moshe weitzman’s picture

moshe weitzman commented
Status: Active » Closed (won't fix)

i suggest you redefine the menu item for managing subscribers to an access denied page .... this won't be aprt of og unless more people request it.

smilodon’s picture

smilodon commented

One might ask why the hell is "invite friend" needed for if i can force every user in the system to be the member of my group !...
Forutnately the code is very clean (thanks to the developers of this module)... i managed to figure it out, how to kill that function. If anyone needs it:

File og.module
Uncomment line 72 // $items[] = array('path' => "og/users/$key/add", 'callback' => 'og_add_users_page', 'title' => t('add subscribers'), 'callback arguments' => array($key), 'type' => MENU_LOCAL_TASK, 'access' => node_access('update', array('nid' => $key, 'status' => 1)), 'weight' => 5);

Uncomment lines 651 to 662

//function og_add_users_page($gid) {
//  $form['og_names'] = array('#type' => 'textarea',
//                            '#title' => t('List of users'),
//                            '#rows' => 5,
//                            '#cols' => 70,
//                            '#description' => t('Add one or more usernames in order to associate users with this group. Multiple usernames should be separated by a comma.')
//                            );
//  $form['op'] = array('#type' => 'submit', '#value' => t('Submit'));
//  $form['gid'] = array('#type' => 'value', '#value' => $gid);
//  $output = drupal_get_form('og_add_users', $form);
//  return $output;
//}

Thats it. This should help out ppl who dont want group admins to "loot around" the website.