?
avatar CodeOfConduct
CodeOfConduct
4 May 2020

Steps to reproduce the issue

Use default settings in J! 3.9.18 for the creation for new users under Global configuration>Users>

i)Send password: NO
ii)New User Activation: Administrator
iii) Send mail to administrators: YES
iv) New user registration group: Registered

  1. Create new user

Set Users>New>

i) Receive Systems Emails: NO
ii) Require Password Reset: NO

Enter passwords or leave blank.

Expected result

a) "User will receive an email with an activation link. When the user clicks this link, the Site Admin will be notified via email and the Site Admin needs to activate the user's account." (as per https://docs.joomla.org/Help39:Components_Users_Configuration)

b) Password is not sent in email to newly created user

c) The administrator needs to activate the user to change its status to "actived" in the backend.

Actual result (applies when site is online or offline)

  1. New user receives email with username and password, as well as link to the site (not activation link)
  2. The user's status in the backend is "activated" as soon as it has been created, i.e. before the administrator has activated it.
  3. Administrator does not receive email after creating new user.

System information (as much as possible)

a) Joomla! 3.9.18 installed from scratch on Unix shared hosting environment
b) Multilingual site configured at Joomla! installation, default site language: Italian
c) Installed Gantry 5 (latest version) + Rockettheme template

Additional comments

avatar CodeOfConduct CodeOfConduct - open - 4 May 2020
avatar joomla-cms-bot joomla-cms-bot - labeled - 4 May 2020
avatar CodeOfConduct CodeOfConduct - change - 4 May 2020
The description was changed
avatar CodeOfConduct CodeOfConduct - edited - 4 May 2020
avatar gerryfrancis
gerryfrancis - comment - 4 May 2020

i) Receive Systems Emails: NO

Expected result a) "User will receive an email with an activation link.

How should a user receive mails when "Receive System Emails" is set to "NO"?

avatar infograf768
infograf768 - comment - 4 May 2020

A user created from backend is totally different from a user creating his/her new account in frontend.
The parameters are set in the plugin.

Screen Shot 2020-05-04 at 11 53 03

Screen Shot 2020-05-04 at 11 53 18

avatar ReLater
ReLater - comment - 4 May 2020

How should a user receive mails when "Receive System Emails" is set to "NO"?

That's a misunderstanding of this setting concerning this case. Normally you never set this setting to "Yes" for registered users. That's a setting for special emails from the Joomla system.

avatar CodeOfConduct
CodeOfConduct - comment - 4 May 2020

@gerryfrancis: That's a fair comment, if the "systems emails" in that setting include the first email after registration from the backend, as I assumed. As infograf768 clarified, that is an incorrect assumption, as the first system email in this case is allowed or suppressed by the plugin.

@infograf768: Thank you very much for your answer. It gave me a solution that at least avoids the password being sent by email.

The question remains, why the tooltip for Global configuration > Users > Send password says ""If set to "Yes" the user's first password will be emailed to the user as part of the registration mail." when in fact the password is sent even if this setting is NO.

So, my suggestions are as follows:

  1. Check whether the functionality related to Global configuration > Users > Send password is correct or/and whether the tooltip needs to be changed. I don't know what the intended functionality is - maybe it relates to passwords being sent as part of password reset requests?

  2. Improve tooltip for "Receive Systems Emails" as follows: "If set to yes, the user will receive system emails, except the first email after registration, whose despatch is determined in the "User - Joomla!" plugin.


    This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/28924.

avatar CodeOfConduct CodeOfConduct - change - 4 May 2020
Title
New user registration emails settings do not work: no password, no system emails, mail to administrators
New user registration: "no password" and "no system emails" - need to improve tooltips & more?
avatar CodeOfConduct CodeOfConduct - edited - 4 May 2020
avatar brianteeman
brianteeman - comment - 4 May 2020

Sorry but this is completely wrong.

  1. If set to no then it should not send the password. If it does then that is a bug. However in my tests the registration email did not send the password. See screenshots at the bottom.

  2. System emails refers to the type of email sent to an administrator eg update available, user awaits approval. It is nothing to do with this email which is a user email.

image

image

avatar CodeOfConduct
CodeOfConduct - comment - 4 May 2020

@brianteeman - interesting that we are getting opposite results. When I set "Notification Mail to User" = Yes in the User - Joomla! plugin, I definitely get a confirmation mail with the password (which I entered, optionally, as administrator when creating the new user), but it is a different email from the one you receive. Mine does not include an activation / verification link (as mentioned in my opening description) and shows the password below the user name.

Also, there seems to be a misunderstanding about the mail setting: I am referring to the one in the attached screenshot.

I hope this helps us isolate what action (if any) should be taken.

Btw, when the "Notification Mail to User" = No in the User - Joomla! plugin, the password fields in the form for the creation of a new user become mandatory. I presume that is intended behaviour.


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/28924.

avatar CodeOfConduct
CodeOfConduct - comment - 4 May 2020

Here the screenshot mentioned in my previous comment...screen shot 2020-05-04 at 11 59 54


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/28924.

avatar brianteeman
brianteeman - comment - 4 May 2020

If you are creating a users account for them then it is obviously assumed they do not need to verify

avatar CodeOfConduct
CodeOfConduct - comment - 4 May 2020

@brianteeman "If you are creating a users account for them then it is obviously assumed they do not need to verify" - sure. I referred to the verification link merely as evidence that we are talking about different emails. One of the issues of this ticket is the fact that the password was sent out when i.m.o. it should not have been - or is my expectation incorrect?


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/28924.

avatar brianteeman
brianteeman - comment - 4 May 2020

If you are creating an account for a user then it has to send them a password otherwise they can not log in

avatar gerryfrancis
gerryfrancis - comment - 4 May 2020

Sorry for misunderstanding, I thought system mails are those sent from the (Joomla!) system in general. Thanks for clarifying.

avatar CodeOfConduct
CodeOfConduct - comment - 4 May 2020

@brianteeman Of course the user will have to be informed of his/her new temporary password, but I would much rather do that via a different channel than by email and without quoting both user ID and password in the same email. Presumably the setting in the User - Joomla! plugin to deactivate such emails was created partly to address such security concerns.

The question that remains is whether the behaviour that I described at the beginning is correct. If so, than I would say the tooltips should be changed. As I said, if the behaviour is not correct, I'll gladly carry out some more tests to help isolate the problem.

avatar brianteeman
brianteeman - comment - 4 May 2020

@brianteeman Of course the user will have to be informed of his/her new temporary password, but I would much rather do that via a different channel than by email and without quoting both user ID and password in the same email. Presumably the setting in the User - Joomla! plugin to deactivate such emails was created partly to address such security concerns.

The setting is for users when they register. Not for admins when they register others.

The option Require Password Reset exists so that the user will receive an email AND when they login for the first time they will be forced to reset it before continuing.

The behaviour you describe in the Actual Results is the expected and designed behaviour

avatar CodeOfConduct
CodeOfConduct - comment - 10 May 2020

@brianteeman Thank you for your clarifications. On that basis I'll now close this issue.

avatar CodeOfConduct CodeOfConduct - change - 10 May 2020
Status New Closed
Closed_Date 0000-00-00 00:00:00 2020-05-10 20:10:37
Closed_By CodeOfConduct
avatar CodeOfConduct CodeOfConduct - close - 10 May 2020

Add a Comment

Login with GitHub to post a comment