solidtime-io
An option to disable registration in self-hosted setup
Hi, thank you for the feature request.
That's a good point, we'll look into that. I'm not quite sure how we can best handle the initial user registration, as well as adding new users, in that case.
My initial thoughts: We could either do a setting in the admin panel somewhere, or it would be an environment variable.
If anyone has input feel free to add it in the comments to this issue.
I agree that an env would be enough; this is how Gitea does it.
They do have an registration (or rather user creation) view for the admin, which would require additional consideration for solidtime:
- Do users get sent a password via email or do they have to set it themselves?
- Are personal organizations created or are users forced to live in a certain organization?
- Something else I'm probably missing now
Another approach that I think would be similar in effort required is a Slack-like ALLOWED_EMAILS or something, where guests can register, as long as they have an email in a domain allowed by the instance admin. This doesn't require any changes or new flows except a small message that says you can't register from that email address, bye.
Isn't there already a "new user" creation functionality for admins in Solidtime as well? I can see one in /admin/users page. Or am I missing something?
@thelazyoxymoron yes you can create users, but I'm pretty sure you can break the application with that right now, as in our regular flow you'll always have a organization as well, and basically everything happens in the organization. Not sure if you can assign users to organizations via the admin panel right now and if email confirmation stuff works correctly in that case.
But the bigger blocker is that you need to register an account to access the admin panel first, so we have to create some flow for that to set up an initial user.