Page 1 of 1

Suspicious User Accounts

Posted: 18 Dec 2008, 17:09
by ramaya
I recently saw that there were some new user accounts created on our Mantis tracker and I asked the other users who have Administrator rights to create accounts and they assure me that they didn't create the accounts, there are only 3 Administrator accounts counting me. My question is, are other user profiles allowed to create user accounts beside Administrator? how can I track who creates user accounts? how can I setup Mantis to only allow users with Administrator rights to create new accounts?

Thank you,

Re: Suspicious User Accounts

Posted: 19 Dec 2008, 13:53
by jb_mantis
By default, only Admins can manage user accounts (set by the $g_manage_user_threshold option). Not sure if you can track how an account was created. Have you turned off the option of lettings users signup on their own? It's the $g_allow_signup option.