[Koha-bugs] [Bug 19660] Set borrower password on first login from self registration

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19660

--- Comment #12 from Agnes Rivers-Moore <arm at hanover.ca> ---
(In reply to Katrin Fischer from comment #11)
> (In reply to Agnes Rivers-Moore from comment #10)
> > Librarian point of view - 
> > As M Tomsett says, this method cannot work properly without an email
> > address. The email field should not be required - especially now with so
> > many countries requiring specific opt-in permission from the user to send
> > them email.
> > However, it should be possible for people to use online services without
> > giving an email address. 
> > I agree with Marcel that the ideal solution is to have the user enter
> > password (hidden, twice for verification) in the registration form. Then,
> > let the email address be optional, as a library set preference.
> 
> The problem with an optional email address on self registration is that you
> have no means to verify that the user registering is a real person. It would
> open self registrations up to bots and pranks.

I am not sure existence of an email address proves a genuine individual or
protects from pranking or misuse. If a library needs to prove there is a real
person who is not already registered, or banned, or from another country, they
would need more than an email address. Our staff see the online registration
attempt and contact the person for ID verification. So, library set preference
for whether email is required or not. For us, phone number required is more
important.

-- 
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.