How to disable certain functions on your site.

Require user login

If you would like to require the users to login before they get access to the site at all you can set the following in site.ini

[SiteAccessSettings]

RequireUserLogin=true

Allowing access

You can, and in many cases should, enable access to certain functions in eZ publish to all users. This is done with the PolicyOmitList. Here is an example configuration for this.

[RoleSettings]

PolicyOmitList[]=user/login

PolicyOmitList[]=user/logout

PolicyOmitList[]=user/forgotpassword

PolicyOmitList[]=user/register

PolicyOmitList[]=user/activate

PolicyOmitList[]=mymodule/myfunction

Disabling specific functions

You can disable certain functions site wide to make your setup more secure. You can e.g. disable user registering for your website.

[SiteAccessRules]

Rules[]

# Enable all functions

Rules[]=Access;enable

Rules[]=ModuleAll;true

# Disable setup module and user register

Rules[]=Access;disable

Rules[]=Module;setup

Rules[]=Module;user/register