Out out safety purpose its good to have him validate the new address with his old address. Then its harder for some one to change address and then just do a password recovery. If the password is not required when doing a e-ail change and its not by default.
/R On Jun 25, 2:06 am, mdipierro <mdipie...@cs.depaul.edu> wrote: > The process of verification is not intended to check whether the email > address is valid (although it accomplishes that) but to verify that > the registrar is who he claims to be (the owner of that email > address). > > When the user changes the email address, he should not receive and > email, instead there should be a validator that contacts the email > server and verifies that the email is valid. We do not have that yet. > We do have > > requires=IS_EMAIL() > > which checks the format of the email. > > Massimo > > On Jun 24, 5:34 pm, Dan <danbr...@gmail.com> wrote: > > > Is there a way to force a verification message/process for users that > > edit their profiles and change their email addresses? > > > These settings are in my model definition: > > auth.settings.registration_requires_verification = True > > auth.settings.registration_requires_approval = True > > > Since the user has already gone through the registration process, the > > act of changing an email address doesn't seem to trigger the > > verification. > > > thanks > > Dan --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "web2py Web Framework" group. To post to this group, send email to web2py@googlegroups.com To unsubscribe from this group, send email to web2py+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/web2py?hl=en -~----------~----~----~----~------~----~------~--~---
