humanmade / humanmade/authorship

Prevent guest authors from logging in, disable account related functionality

Open
#47 1 comment 0 reactions 0 assignees View on GitHub
P2 Task
Dominant language
PHP
Stars
68
Forks
11
PR merge metrics
No merged PRs in 30d

Description

A user with a role of Guest Author should not be able to log in at all.

* Password should be set to a long random password when a guest author is created
* Logging in should be denied at the authentication level
- Logging in at `wp-login.php`
- WordPress core application passwords
- REST API Basic Auth
- XML-RPC
* Ensure the guest author does not get sent an email when their account is created
* Disable password reset functionality for the user

[The Disable Accounts plugin](https://github.com/humanmade/disable-accounts) should do most of what we need. If there's anything missing, let's send fixes upstream to that plugin too.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.