registration: add a way to disable registration

backend/src/appenlight/__init__.py

@@ -84,6 +84,11 b' def main(global_config, **settings):'
     encryption.ENCRYPTION_SECRET = settings.get('encryption_secret')
     # import this later so encyption key can be monkeypatched
     from appenlight.models import DBSession, register_datastores
+
+    # registration
+    settings['appenlight.disable_registration'] = asbool(
+        settings.get('appenlight.disable_registration'))
+
     # update config with cometd info
     settings['cometd_servers'] = {'server': settings['cometd.server'],
                                   'secret': settings['cometd.secret']}

backend/src/appenlight/views/index.py

@@ -176,6 +176,10 b' def register(request):'
     if request.method == 'POST' and form.validate():
         log.info('registering user')
         # insert new user here
+        if request.registry.settings['appenlight.disable_registration']:
+            request.session.flash(_('Registration is currently disabled.'))
+            return HTTPFound(location=request.route_url('/'))
+
         new_user = User()
         DBSession.add(new_user)
         form.populate_obj(new_user)

backend/src/appenlight/views/user.py

@@ -79,6 +79,10 b' def users_create(request):'
                                 csrf_context=request)
     if form.validate():
         log.info('registering user')
+        # probably not needed in the future since this requires root anyways
+        # lets keep this here in case we lower view permission in the future
+        # if request.registry.settings['appenlight.disable_registration']:
+        #     return HTTPUnprocessableEntity(body={'error': 'Registration is currently disabled.'})
         user = User()
         # insert new user here
         DBSession.add(user)