Hi, Am 12.09.2010 23:34, schrieb Ian Boston: > > On 12 Sep 2010, at 00:25, Felix Meschberger wrote: > >> There is one situation where an admin session is always retrieved: The >> CreeateUser servlet. This is probably a bug and should only use an admin >> session for self-registration. > > > +1, > I think we have modified out CreateUser servlet to do this, and added a hook > to allow control over self registration, we use that hook to look for things > like reCaptcha tokens. Is that something that should be in Sling ?
Sounds like a good idea -- and, yes, very open to accept such a contribution ;-) BTW: I have created a hook for self-registration in the launchpad content -- the signup.html page currently just displaying the usual "not-implemented-yet" banner. We might want to integrate that with the self-registration CreateUser servlet. Regards Felix
