There was a problem loading the comments.

Email to external users allows anyone to create an external account

Support Portal  »  Knowledgebase  »  Viewing Article

  Print

Original Question

or Issue:

Email to external users has a formatted URL which allows anyone to create an external account

Environment:

  • Product - FileCloud Server
  • Version - Any
  • Platform - Any
Steps to Reproduce:

 

 

Error or Log Message:  

Defect or

Enhancement Number:

 
Cause:

Settings > Policies > Default policy > User Policy > ‘Disable Invitations to New Users’ and

 ‘Create account on new user shares’ both set to ‘NO’

Resolution or

Workaround:

If you set the second setting to YES, a few things will happen:

  1. An account will be created automatically for the user within the share
  2. In that email it will send a PW for the user as well
  3. The URL in the email will look different
    1. It will go from 
      1. https://XXXXX/ui/core/index.html?shownewaccount=1#/
      2. to only showing https://XXXX

Some things to note though:

  • You can still navigate to that URL if someone types in "ui/core/index.html?shownewaccount=1#/"
  • Disable the "new account" button in the UI, if you want to hide external users to create a new account on their own
    • Disable new account creation

      Customization > Customization > General > Login.  Here you can disable the option to create new accounts on the user portal.  "Show New Account Button"

  • Even if someone creates an external share somehow by finding that URL on your site, they will not have any permissions to view anything
    • Admin approval

      This dictates if admin approval is required or not when a new account is created.

      Account Approval - FileCloud Docs - Server

       

      Settings > Admin tab Automatic Account Approval: Set it to something else besides 0

Notes:   

Share via

Related Articles


Self-Hosted Help Desk Software by SupportPal
© FileCloud