Module for user registration before posting reactions

Dear all,

Do you know if it is possible to have a registration /
authentification process
before posting a reaction ?
The objective here is not to have unregistered messages and
identity usurpation.

Is there any existing module or add-on ? If not, is it
planned for the next
release ?

I'm using Roller 2.3

Thanks in advance for your help,

Best regards,

Alexandre

Hi All,

I have the similar question. How do we control who
posts comments to weblogs? Today anybody can bookmark
the blog page, go there, view and post comments
without logging in. Can we force user to login in
order to get to weblog?
What is the real jsp that serves the weblog page (I
know it goes through the Weblog.vm but who calls it)?

Thank you

--- ziconlinefree.fr wrote:

> 
> Dear all,
> 
> Do you know if it is possible to have a registration
> / authentification process
> before posting a reaction ?
> The objective here is not to have unregistered
> messages and identity usurpation.
> 
> Is there any existing module or add-on ? If not, is
> it planned for the next
> release ?
> 
> I'm using Roller 2.3
> 
> Thanks in advance for your help,
> 
> Best regards,
> 
> Alexandre
> 



 
____________________________________________________________
________________________
Bored stiff? Loosen up... 
Download and play hundreds of games for free on Yahoo!
Games.
http://games.yahoo
.com/games/front

ziconline wrote:
> 
> Do you know if it is possible to have a registration /
authentification
> process
> before posting a reaction ?
> The objective here is not to have unregistered messages
and identity
> usurpation.
> 

I am interested too. comments moderation is good but not
sufficient. 
But I didn't found anything not even in next releases
proposals (
http://cwiki.apache.org/confluence/display/ROL
LER/Roller+Proposals Roller
Proposals ).

Regards,
Sergio
-- 
View this message in context: http://
www.nabble.com/Module-for-user-registration-before-posting-r
eactions-tf3226571s12275.html#a8996413
Sent from the Roller - User mailing list archive at
Nabble.com.

I'm also very interested in this feature.

It's working for Wordpress, it might be a good idea to
implement it into
Roller.

Allowing registration to post comment might also be a good
way to avoid spam
comments, and make sure of the identity of a poster,

Best regards,

Alexandre B.

On 2/16/07, mostjiko <sergiomorstabilinigmail.com> wrote:
>
>
>
> ziconline wrote:
> >
> > Do you know if it is possible to have a
registration / authentification
> > process
> > before posting a reaction ?
> > The objective here is not to have unregistered
messages and identity
> > usurpation.
> >
>
> I am interested too. comments moderation is good but
not sufficient.
> But I didn't found anything not even in next releases
proposals (
> http://cwiki.apache.org/confluence/display/ROL
LER/Roller+Proposals Roller
> Proposals ).
>
> Regards,
> Sergio
> --
> View this message in context:
> http://
www.nabble.com/Module-for-user-registration-before-posting-r
eactions-tf3226571s12275.html#a8996413
> Sent from the Roller - User mailing list archive at
Nabble.com.
>
>

Currently we have a workaround for this at our enterprise
pilot project.
It is a twist, not quite pretty, but works. It goes like
this: 

1. The comment authentication form is modified to provide a
"username"
and "password" field. And in addition, a checkbox.

2. When the checkbox is clicked (we call it approval for
authenticating
commenter), the onclick calls a custom javascript code to
append
"username" to the "name" field of the
comment form. (added parenthesis
to avoid ambiguity)
3. When the commenter clicks on "post". The
comment form is submitted to
the comment authenticator.
4. The authenticator then authenticates the
"username" and "password"
against enterprise LDAP.
5. Then the authenticator is looking for the
"username" string in "name"
field.
6. If that is found, the post is successful.

This way, the "username" that identifies the
person in an organization
is recorded in Roller. The possibility of anonymous comments
and spam is
removed.

However, since we do not populate everybody in Roller, it is
impractical
to authenticate the commenters against Roller's user
database. If I know
Acegi better (which I don't), I would define an Acegi
authenticator
there, and calls that authenticator, but in my case, I
hardcoded LDAP
calls into comment authenticator. Maybe somebody can figure
out the
right way of doing this...

Steve

-----Original Message-----
From: Alexandre B. [mailto:letsstayinformed.147258369gmail.com] 
Sent: Friday, February 16, 2007 3:18 AM
To: roller-userincubator.apache.org
Subject: Re: Module for user registration before posting
reactions

I'm also very interested in this feature.

It's working for Wordpress, it might be a good idea to
implement it into
Roller.

Allowing registration to post comment might also be a good
way to avoid
spam
comments, and make sure of the identity of a poster,

Best regards,

Alexandre B.

On 2/16/07, mostjiko <sergiomorstabilinigmail.com> wrote:
>
>
>
> ziconline wrote:
> >
> > Do you know if it is possible to have a
registration /
authentification
> > process
> > before posting a reaction ?
> > The objective here is not to have unregistered
messages and identity
> > usurpation.
> >
>
> I am interested too. comments moderation is good but
not sufficient.
> But I didn't found anything not even in next releases
proposals (
> http://cwiki.apache.org/confluence/display/ROL
LER/Roller+Proposals
Roller
> Proposals ).
>
> Regards,
> Sergio
> --
> View this message in context:
>
http://www.nabble.com/Module-for-user-re
gistration-before-posting-reacti
ons-tf3226571s12275.html#a8996413
> Sent from the Roller - User mailing list archive at
Nabble.com.
>
>


------------------------------------------------------------
------------------
Notice:  This e-mail message, together with any attachments,
contains
information of Merck & Co., Inc. (One Merck Drive,
Whitehouse Station,
New Jersey, USA 08889), and/or its affiliates (which may be
known
outside the United States as Merck Frosst, Merck Sharp &
Dohme or MSD
and in Japan, as Banyu - direct contact information for
affiliates is 
available at http://www
.merck.com/contact/contacts.html) that may be 
confidential, proprietary copyrighted and/or legally
privileged. It is 
intended solely for the use of the individual or entity
named on this 
message. If you are not the intended recipient, and have
received this 
message in error, please notify us immediately by reply
e-mail and then 
delete it from your system.


------------------------------------------------------------
------------------

Sounds very interesting,

Have you changed the Authenticator yourself or created a new
one ?

Will it be possible to propose that authentication to the
community users
(at least for the ones interested in it) ?

(even if I don't use a LDAP directory, it might be good to
gather ideas)

Thanks in advance,

Best regards,

Alexandre B

On 2/16/07, Lihn, Steve <horng_twu_lihnmerck.com> wrote:
>
> Currently we have a workaround for this at our
enterprise pilot project.
> It is a twist, not quite pretty, but works. It goes
like this:
>
> 1. The comment authentication form is modified to
provide a "username"
> and "password" field. And in addition, a
checkbox.
> 2. When the checkbox is clicked (we call it approval
for authenticating
> commenter), the onclick calls a custom javascript code
to append
> "username" to the "name" field of
the comment form. (added parenthesis
> to avoid ambiguity)
> 3. When the commenter clicks on "post". The
comment form is submitted to
> the comment authenticator.
> 4. The authenticator then authenticates the
"username" and "password"
> against enterprise LDAP.
> 5. Then the authenticator is looking for the
"username" string in "name"
> field.
> 6. If that is found, the post is successful.
>
> This way, the "username" that identifies the
person in an organization
> is recorded in Roller. The possibility of anonymous
comments and spam is
> removed.
>
> However, since we do not populate everybody in Roller,
it is impractical
> to authenticate the commenters against Roller's user
database. If I know
> Acegi better (which I don't), I would define an Acegi
authenticator
> there, and calls that authenticator, but in my case, I
hardcoded LDAP
> calls into comment authenticator. Maybe somebody can
figure out the
> right way of doing this...
>
> Steve
>
> -----Original Message-----
> From: Alexandre B.
[mailto:letsstayinformed.147258369gmail.com]
> Sent: Friday, February 16, 2007 3:18 AM
> To: roller-userincubator.apache.org
> Subject: Re: Module for user registration before
posting reactions
>
> I'm also very interested in this feature.
>
> It's working for Wordpress, it might be a good idea to
implement it into
> Roller.
>
> Allowing registration to post comment might also be a
good way to avoid
> spam
> comments, and make sure of the identity of a poster,
>
> Best regards,
>
> Alexandre B.
>
> On 2/16/07, mostjiko <sergiomorstabilinigmail.com> wrote:
> >
> >
> >
> > ziconline wrote:
> > >
> > > Do you know if it is possible to have a
registration /
> authentification
> > > process
> > > before posting a reaction ?
> > > The objective here is not to have
unregistered messages and identity
> > > usurpation.
> > >
> >
> > I am interested too. comments moderation is good
but not sufficient.
> > But I didn't found anything not even in next
releases proposals (
> > http://cwiki.apache.org/confluence/display/ROL
LER/Roller+Proposals
> Roller
> > Proposals ).
> >
> > Regards,
> > Sergio
> > --
> > View this message in context:
> >
> http://www.nabble.com/Module-for-user-re
gistration-before-posting-reacti
> ons-tf3226571s12275.html#a8996413
> > Sent from the Roller - User mailing list archive
at Nabble.com.
> >
> >
>
>
>
>
------------------------------------------------------------
------------------
> Notice:  This e-mail message, together with any
attachments, contains
> information of Merck & Co., Inc. (One Merck Drive,
Whitehouse Station,
> New Jersey, USA 08889), and/or its affiliates (which
may be known
> outside the United States as Merck Frosst, Merck Sharp
& Dohme or MSD
> and in Japan, as Banyu - direct contact information for
affiliates is
> available at http://www
.merck.com/contact/contacts.html) that may be
> confidential, proprietary copyrighted and/or legally
privileged. It is
> intended solely for the use of the individual or entity
named on this
> message. If you are not the intended recipient, and
have received this
> message in error, please notify us immediately by reply
e-mail and then
> delete it from your system.
>
>
>
>
------------------------------------------------------------
------------------
>

I'm looking for this feature too.
If an user has already logged in he can post a comment (name
of poster is
the the username); if he isn't logged in he'll see an info
"you are not
logged in" with an link to the login form.



Dmitriy Rudakov wrote:
> 
> Hi All,
> 
> I have the similar question. How do we control who
> posts comments to weblogs? Today anybody can bookmark
> the blog page, go there, view and post comments
> without logging in. Can we force user to login in
> order to get to weblog?
> What is the real jsp that serves the weblog page (I
> know it goes through the Weblog.vm but who calls it)?
> 
> Thank you
> 
> --- ziconlinefree.fr wrote:
> 
>> 
>> Dear all,
>> 
>> Do you know if it is possible to have a
registration
>> / authentification process
>> before posting a reaction ?
>> The objective here is not to have unregistered
>> messages and identity usurpation.
>> 
>> Is there any existing module or add-on ? If not,
is
>> it planned for the next
>> release ?
>> 
>> I'm using Roller 2.3
>> 
>> Thanks in advance for your help,
>> 
>> Best regards,
>> 
>> Alexandre
>> 
> 
> 
> 
>  
>
____________________________________________________________
________________________
> Bored stiff? Loosen up... 
> Download and play hundreds of games for free on Yahoo!
Games.
> http://games.yahoo
.com/games/front
> 
> 

-- 
View this message in context: http://
www.nabble.com/Module-for-user-registration-before-posting-r
eactions-tf3226571s12275.html#a9104531
Sent from the Roller - User mailing list archive at
Nabble.com.

I'm looking for this feature too.
If an user has already logged in he can post a comment (name
of poster is
the the username); if he isn't logged in he'll see an info
"you are not
logged in" with a link to the login form.



Dmitriy Rudakov wrote:
> 
> Hi All,
> 
> I have the similar question. How do we control who
> posts comments to weblogs? Today anybody can bookmark
> the blog page, go there, view and post comments
> without logging in. Can we force user to login in
> order to get to weblog?
> What is the real jsp that serves the weblog page (I
> know it goes through the Weblog.vm but who calls it)?
> 
> Thank you
> 
> --- ziconlinefree.fr wrote:
> 
>> 
>> Dear all,
>> 
>> Do you know if it is possible to have a
registration
>> / authentification process
>> before posting a reaction ?
>> The objective here is not to have unregistered
>> messages and identity usurpation.
>> 
>> Is there any existing module or add-on ? If not,
is
>> it planned for the next
>> release ?
>> 
>> I'm using Roller 2.3
>> 
>> Thanks in advance for your help,
>> 
>> Best regards,
>> 
>> Alexandre
>> 
> 
> 
> 
>  
>
____________________________________________________________
________________________
> Bored stiff? Loosen up... 
> Download and play hundreds of games for free on Yahoo!
Games.
> http://games.yahoo
.com/games/front
> 
> 

-- 
View this message in context: http://
www.nabble.com/Module-for-user-registration-before-posting-r
eactions-tf3226571s12275.html#a9104531
Sent from the Roller - User mailing list archive at
Nabble.com.