permissions & variable for disallowing editing of user variables [#64483]

In an LDAP read only environment, we don't want to let the user request a new password, change email address or change password. all three of these are handled by existing procedures & applications. there's a variable 'user_request_password' which removes the link in the login block, and two permissions 'change own email' and 'change own password'

attached is a unified diff patch to 4.7.0

Comment	File	Size	Author
#2	user.patch_2.txt	2.15 KB	corris
	user.patch_1.txt	2.15 KB	corris

Comments

Comment #1

killes@www.drop.org commented 19 May 2006 at 17:30

Version:	4.7.0	» x.y.z
Status:	Reviewed & tested by the community	» Needs work

No new features will be added to 4.7.

Your patch does nor comply with our coding standards.

Comment #2

corris commented 19 May 2006 at 18:31

Status:

Needs work

» Needs review

Status	File	Size
new	user.patch_2.txt	2.15 KB

oh, yea, should have been cvs, sorry.

was it the indentation? how's this one?

Comment #3

Tobias Maier commented 19 May 2006 at 20:52

have a look at http://drupal.org/node/53103
I think this would be userful for your purpose

Comment #4

dries commented 23 May 2006 at 19:34

Status:

Needs review

» Needs work

Coding style needs work; incorrect use of spaces. Also, we write 'e-mail' not 'email'. All minor changes. ;)

Now, with Drupal 4.7.0, an LDAP authentication module might actually be able to modify the user.module's generated forms. Maybe that's a better solution? Worth exploring? It wouldn't require fiddling with permissions when the LDAP authentication module is enabled.

Comment #5

dries commented 23 May 2006 at 19:39

Cross-posted an issue at http://drupal.org/node/65159. Let's see what the LDAP integration module maintainers think/need.

Comment #6

dries commented 26 May 2006 at 09:25

Comment #7

Bèr Kessels commented 13 February 2007 at 16:56

Version:

x.y.z

» 6.x-dev

One big problem with implementing http://drupal.org/node/65159 cleanly is that Drupal has hardcoded the requirement of an emailaddress.

user_validate_mail($mail) is called, instead of the default Form Api validation. We would need to implement a better way in core first, then LDAP auth can simply override the forms with form_alter. Right now we cannot simply unset a form, because of this harcoded requirement of an email address.