Unless of course you're comfortable wading through the source and hacking it out yourself...
However, we have been talking about incorporating a new authentication method. There are really 4 main ways that someone could want logins to happen.
They are:
- None
I'm not kidding. No logins at all. You've got the admin user that's get's established on install and if you want to create another user, you do it manually. But public joins are forbidden.
- Manual
Basically the site admin would get to see a list of "pending" accounts and have the ability to approve or deny people as they see fit. The people signing up for an account would need to pick a password or have one generated and it would be available once their account was activated. This still allows for public sign up, but more control over your user base.
- Automatic
This is essentially what happens now. You're saying anyone that wants to sign up can, provided they have a valid email address to get their password. It could be worked so that they request a password and have to go to some URL to validate their email address. But everything happens unattended, or at least without the attention of the site admin.
- Custom
This one is a tad more complicated. But if you want some special circumstances to be met before they can sign up this is where you do it. Essentially you tell me what function to call to check if they can log in, tell me what "valid values" are to log them in and I'll do just that. You could use this if you wanted to see if they submitted a particular survey, or whatever.
In a nutshell, that's it. We're still not sure how or when this is going to be implemented but it will be in an upcoming release.
Not satisfied? Then let us know what exactly you would like it to be changed to and we can see what your options are.