Details
-
Bug
-
Resolution: Fixed
-
Medium
-
2011.5, 2011.6
-
None
Description
The new register system has a problem.
I don't want to use a workflow. I just want the user to register, and click on activation link I receive by mail.
But it seems the activation process has a security check based on session. That is the problem.
If register with a browser, which is not my default browser, when I click on the activation link in the mail, my default browser is opened, and I have the message : "Your email address has been confirmed. An administrator needs to approve your sign up request, before your login becomes valid."
The sentence is false or incomplete. Impossible to understand the real problem. And the user will never connect.
On the top of that, I receive a 2nd mail with another link to activate my account. It seems weird that user register is called when activating.
You should trust the activation link and remove session check (use IP in a table if you really want another security check).
You have to warn the user and document this !
Steps to reproduce
Register on a browser. Open the link on another browser.
Attachments
Issue Links
- relates to
-
EZP-18629 Cannot use workflow events with the user_activation operation
- Open