dhunt925/ConsiderIt — Issue #72: Disallow unconfirmed users
Author: krystay
Created: 2012-02-21 19:25:30+00:00
State: open

Unconfirmed users should not have all the same privileges as confirmed users. The main site says they can't have their vote counted but implies that they can do everything else. When I tested it, it seemed like an unconfirmed user could do anything, including having their vote counted.

I don't think an unconfirmed user should be able to do anything public, like commenting or writing new points. The simplest approach, which would also be most consistent with standard practices, is to prevent unconfirmed users from logging in at all. If they try to log in, redirect them to a page saying they need to confirm their account and directing them to the "resend confirm instructions" page.