Suspicious User Accounts

[ramaya]

I recently saw that there were some new user accounts created on our Mantis tracker and I asked the other users who have Administrator rights to create accounts and they assure me that they didn't create the accounts, there are only 3 Administrator accounts counting me. My question is, are other user profiles allowed to create user accounts beside Administrator? how can I track who creates user accounts? how can I setup Mantis to only allow users with Administrator rights to create new accounts?

Thank you,

[jb_mantis]

By default, only Admins can manage user accounts (set by the $g_manage_user_threshold option). Not sure if you can track how an account was created. Have you turned off the option of lettings users signup on their own? It's the $g_allow_signup option.