Properly balanced registration system
|Assignee:||Luis Figueira||% Done:|
Two possibly conflicting basic requirements for this site:
1. Registration needs to be fairly open. Anyone who is actually able to contribute something constructive should be able to register to do so.
2. Any user can create and contribute to a project.
Requirement 2, along with more usual requirements like cutting down on spammers, implies that we need to be fairly careful about the exact details of requirement 1 because a self-registered user will have quite a lot of power. But we don't want to make anything so painful that nobody will use the service.
This suggests we want a registration system in which a moderator has to approve the registration, and the hopeful user has to provide a little more real-world information than might normally be the case. For example, we could ask for some details about the work they are interested in, or their background, or something audio-related, as a sort of Turing test akin to a rather sophisticated CAPTCHA to try to establish that the user is genuine.
Meanwhile, the email sent to a moderator asking for a decision on each new user should have a bit more information than it currently does -- ideally the moderator should to be able to make the decision purely from reading the email (so it needs the contents of whatever credential information it was that we asked them to provide -- or is there any security concern over sending this information in the email?).
Finally, we perhaps also want moderator approval for new project creation. Not sure whether Redmine supports this?