Subj : Re: Sysop to create new user
To   : g00r00
From : Borax Man
Date : Sat May 16 2020 11:39 pm

 Re: Re: Sysop to create new user
 By: g00r00 to Borax Man on Sat May 16 2020 05:07 pm

 g0> There are a few ways you could accomplish this but Mystic has a "matrix"
 g0> login system which is designed for this exact purpose. The user is given
 g0> the option to "apply" for an account but they never get into the BBS until
 g0> you approve the application.

 g0> To experiment with this, go into System Configuration > Login Settings and
 g0> set the following options:

 g0> Use Matrix Login: Yes
 g0> Matrix Password: <no value>
 g0> Matrix ACS: s20

 g0> In a default Mystic installation, new users are given a security level of
 g0> 10. Because you set the Matrix ACS to "s20" they would never be able to
 g0> login until you manually upgraded them to Security Profile 20.

I've tried this, and without a Matrix password, the user is able to select "L"
and login, after creating their account intially and returning to the Matrix
Menu.  With a password put in, they need to enter a password to proceed.

 g0> What the user sees when the connect are two options: "(A)pply" or
 g0> "(L)ogin". If the try to login before you approve them it will say they
 g0> have not been approved yet (until you manually upgrade them to security
 g0> 20). 


This doesn't happen, despite the fact they have a security level of 10, and I
set the Matrix ACS level s20.

 g0> It shouldn't be too much effort to allow users to be created in the user
 g0> editor, but the way Mystic is designed to handle this scenario is with the
 g0> Matrix login.

 g0> If you really didn't want users to be able to Apply online (ONLY via
 g0> email) then you could do something like limit the "(A)pply" option to a
 g0> local-only node, and automate the "(L)ogin" command for non-local
 g0> connections. Personally doing this doesn't make sense to me since the
 g0> application workflow is pretty much identical either way, but to each
 g0> their own! :) 

 g0> If you set it up this way then remote connections would never be given the
 g0> option to Apply for a new account, instead they would immediately be given
 g0> the login prompt. Only when you connected via the local console would you
 g0> get a menu to Login or Create a new account.


This might be the better option.  It is OK to create the accounts locally, then
simply give the user the ability to log in, passing on the details.  If there
is a way to allow Login for external connection, but Apply for local only, that
would solve the problem.

.... Mother Nature is a Bitch.
--- SBBSecho 3.11-Linux
 * Origin: thePharcyde_ telnet://bbs.pharcyde.org (Wisconsin) (1:154/700)

.