Today I logged into the Knowledge Trails site and saw that one of the personas made a blog post. A persona that went by the name of Valerian. I didnt add this person and I have yet to find out whether Adrian added this user. It would’ve been fine if Adrian added him/her but this started to concern me (while waiting for a reply from Adrian).
The fact that this person could join this closed community so easily doesnt say very much about the security protecting the site. It is so easy for any random person register and start creating data, which may not be grounded in expertise (which is the least of my worries at this point). At the start, the only thing you need to have functioning is an email address. As soon as you have that, you just have to plug in some random details (username & password), click on the links that get sent to your email and voila, you’re in!
Not anymore tho =D After worrying about how just anyone can register and wreak havoc on the site, I decided to finally look for a plugin that gives administrators the power to control who can access the closed site. The plugin is called Site Access (for obvious reasons) and it seems like it’s really doing it’s job. I created another account to test its usability. With this plugin, anyone can still simply register the same way (by clicking the Register button, plugging in details then validating their email account) but they cant actually access the site unless an administrator approves and activates the user. Much better for security of the site, in my opinion =D
![[Alternative Collaboration]](http://s0.wp.com/wp-content/themes/pub/motion/images/genericlogo.png?m=1266559376g)


