Merge pull request #56 from UIUCLibrary/config_user_create

Fix #55 by adding config to prevent supervisors from making new uers

Author: alexdryden

Module.php

@@ -246,6 +246,21 @@ protected function addAclRules()
             ['search', 'read']
         );
 
+        $globalSettings = $this->getServiceLocator()->get('Omeka\Settings');
+        if (! $globalSettings->get('teams_site_admin_make_user')){
+            $acl->deny(
+                'site_admin',
+                'Omeka\Entity\User',
+                ['create', 'delete', 'change-password', 'edit-keys']
+            );
+
+            $acl->deny(
+                'site_admin',
+                'Omeka\Api\Adapter\UserAdapter',
+                ['create', 'delete']
+            );
+        }
+
         $acl->allow(
             $viewerRoles,
             [Entity\TeamResource::class],

src/Form/ConfigForm.php

@@ -36,6 +36,18 @@ public function init()
             ],
         ]);
 
+        $this->add([
+            'type' => 'checkbox',
+            'name' => 'teams_site_admin_make_user',
+            'options' => [
+                'label' => 'Allow site admins to create new users', // @translate
+            ],
+            'attributes' => [
+                'checked' => $this->globalSettings->get('teams_site_admin_make_user') ? 'checked' : '',
+                'id' => 'teams_site_admin_make_user',
+            ],
+        ]);
+
     }
     public function setGlobalSettings($globalSettings)
     {