Skip to content

Self Account Creation #9982

Description

@bmcutler

What problem are you trying to solve with Submitty
Currently a sysadmin needs to create a new user or an instructor needs to add a student to a course (which creates a new user if they don't exist).

A new student user cannot add themselves to the server even if there might be courses on the server that allow self-registration (see also issue #3950).

Describe the way you'd like to solve this problem
Similar to other websites that allow users to create a new account for themselves on the server, let's add that as an option for Submitty servers.

  • add a boolean configuration setting to the overall server (probably in /usr/local/submitty/config/submity.json) to indicate whether the server allows self-account creation. By default this should be OFF.

  • if self-account creation is allowed on the server, then on the login page there should be an option to "create new account".

  • create new account should lead to a page that collects & validates the information for the new user. It should confirm that the new account does not collide with an existing account (neither username nor email address can be in use).

  • Ideally we should have a confirmation via email step (the server sends an email to the provided address, which returns a hash code / url that allows the user to complete the account creation step.

  • the self-creation account has the lowest level privilege.

@cjreed121
what other security notes should we add?

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions