Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-9624

Email self-enroll with administrator approval process

    Details

    • Type: New Feature
    • Status: Open
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: 1.8, 2.5.1
    • Fix Version/s: BACKEND
    • Component/s: Authentication
    • Labels:
    • Affected Branches:
      MOODLE_18_STABLE, MOODLE_25_STABLE

      Description

      Email self enroll would be improved if an option was added for the administrator to approve the person before they had site access.

      There are work arounds with this but should be in the core.

        Gliffy Diagrams

          Attachments

            Issue Links

              Activity

              Hide
              dougiamas Martin Dougiamas added a comment - - edited

              This could help against spammers, but I can see a problem that the admin will be faced with lots of people and no idea if they are spammers or not. Perhaps not so useful after all ...

              Show
              dougiamas Martin Dougiamas added a comment - - edited This could help against spammers, but I can see a problem that the admin will be faced with lots of people and no idea if they are spammers or not. Perhaps not so useful after all ...
              Hide
              awyatt A. T. Wyatt added a comment -

              I am certainly not a programmer, but it seems to me that some sort of check for course enrollment, and/or forum or assignment activity might help. I would think that this would differentiate between a spammer (who will likely ONLY have profile activity) and a real participant.

              Show
              awyatt A. T. Wyatt added a comment - I am certainly not a programmer, but it seems to me that some sort of check for course enrollment, and/or forum or assignment activity might help. I would think that this would differentiate between a spammer (who will likely ONLY have profile activity) and a real participant.
              Hide
              jk3us Jay Knight added a comment -

              I think this is exactly what we are looking for. We want users to request enrollment in a course, but the instructor must then accept that enrollment. Is anything like that possible now?

              Show
              jk3us Jay Knight added a comment - I think this is exactly what we are looking for. We want users to request enrollment in a course, but the instructor must then accept that enrollment. Is anything like that possible now?
              Hide
              albertramsbottom paul added a comment -

              Martin your comments are not useful, the idea of this is that it allows people to ask to be on a course and the assigned administrator, Head of Service, Manager, teacher, course creator, etc can then either approve this request or not. You must understand that Moodle is now being used in the corporate environment. The corporate environment has a different set of requirements than a school or a University.

              For instance Moodle in our environment is being used to support internal corporate training where there are no spammers. And in an external context we use Moodle to allow stakeholders to sign up for training opportunities and eLearning courses. The user registration is controlled by a different system, so spammers have no way in.

              In addition to this most Universities have Moodle integrated with back-end MIS systems and have self registration and self enrolment disabled, so again spammers are not a problem.

              This would be a very useful feature, please try to think outside of the box

              Show
              albertramsbottom paul added a comment - Martin your comments are not useful, the idea of this is that it allows people to ask to be on a course and the assigned administrator, Head of Service, Manager, teacher, course creator, etc can then either approve this request or not. You must understand that Moodle is now being used in the corporate environment. The corporate environment has a different set of requirements than a school or a University. For instance Moodle in our environment is being used to support internal corporate training where there are no spammers. And in an external context we use Moodle to allow stakeholders to sign up for training opportunities and eLearning courses. The user registration is controlled by a different system, so spammers have no way in. In addition to this most Universities have Moodle integrated with back-end MIS systems and have self registration and self enrolment disabled, so again spammers are not a problem. This would be a very useful feature, please try to think outside of the box
              Hide
              calvin Calvin Huang added a comment -

              This is a desperately needed feature as it serves a more common use case than either of the current options (email verification only OR manual accounts). In fact, email verification -> admin approval is probably the most common account creation method for closed communities (doubly so for online courses). Having the email verification first means admins have fewer spammers to deal with. And the current email-verification-only option is clearly inadequate if even the official documentation warns users not to use it due to the large amount of spam it will incur.

              The email self-signup + admin approval method also decreases admin workload in that:

              1. Students will enroll themselves, filling out all the necessary + optional fields. The admin only has to look over the info and approve it.

              Otherwise, students have to contact the admin to request enrollment; if the student neglects to provide required info, the admin then has to contact the student back for that info; then the admin has to create the account and email the student back to let them know it was created; and then the student will probably still have to fill in extra profile info or change the password.

              2. Unlike the current email self-signup, admins don't really need to do anything about spammers. Whereas with email verification only, admins need to constantly check for spammers and disable their accounts & ban their IPs (and delete any spam posts), email verification + admin approval means admins can just ignore the spammers and not approve their accounts.

              This is especially handy if there's a simple external list that admins can check the account signups against. E.g. if a signup's email address doesn't belong to a student or the signup's name isn't on the list of students, their accounts simply won't get approved and the inactive account will be deleted after a few weeks.

              I understand that for large universities and the like, they'll usually have Moodle integrated with an external enrollment database, so they don't have this problem. But for small to medium-sized organizations, this is a vital account creation method that pretty much all other community platforms seem to support.

              Show
              calvin Calvin Huang added a comment - This is a desperately needed feature as it serves a more common use case than either of the current options (email verification only OR manual accounts). In fact, email verification -> admin approval is probably the most common account creation method for closed communities (doubly so for online courses). Having the email verification first means admins have fewer spammers to deal with. And the current email-verification-only option is clearly inadequate if even the official documentation warns users not to use it due to the large amount of spam it will incur. The email self-signup + admin approval method also decreases admin workload in that: 1. Students will enroll themselves, filling out all the necessary + optional fields. The admin only has to look over the info and approve it. Otherwise, students have to contact the admin to request enrollment; if the student neglects to provide required info, the admin then has to contact the student back for that info; then the admin has to create the account and email the student back to let them know it was created; and then the student will probably still have to fill in extra profile info or change the password. 2. Unlike the current email self-signup, admins don't really need to do anything about spammers. Whereas with email verification only, admins need to constantly check for spammers and disable their accounts & ban their IPs (and delete any spam posts), email verification + admin approval means admins can just ignore the spammers and not approve their accounts. This is especially handy if there's a simple external list that admins can check the account signups against. E.g. if a signup's email address doesn't belong to a student or the signup's name isn't on the list of students, their accounts simply won't get approved and the inactive account will be deleted after a few weeks. I understand that for large universities and the like, they'll usually have Moodle integrated with an external enrollment database, so they don't have this problem. But for small to medium-sized organizations, this is a vital account creation method that pretty much all other community platforms seem to support.
              Hide
              stuartrmealor Stuart R Mealor added a comment - - edited

              We have a number of sites (our own and clients) that are seeing increased spam account creation.
              I believe a facility for an Admin (or specific authorised user) to be able to manually approve account created using email self-registration would be a much needed core option for small to medium sized sites.
              This looks like a reasonable starting point: https://moodle.org/plugins/view.php?plugin=auth_emailadmin
              Have added a Moodle Partner flag to this issues as more than one client has now requested this feature.

              Show
              stuartrmealor Stuart R Mealor added a comment - - edited We have a number of sites (our own and clients) that are seeing increased spam account creation. I believe a facility for an Admin (or specific authorised user) to be able to manually approve account created using email self-registration would be a much needed core option for small to medium sized sites. This looks like a reasonable starting point: https://moodle.org/plugins/view.php?plugin=auth_emailadmin Have added a Moodle Partner flag to this issues as more than one client has now requested this feature.

                People

                • Votes:
                  8 Vote for this issue
                  Watchers:
                  9 Start watching this issue

                  Dates

                  • Created:
                    Updated: