# User self registration protection

**URL:** <https://forums.concretecms.org/t/user-self-registration-protection/9010>\
**Category:** Developing with Concrete\
**Created:** [April 20, 2025, 4:01pm UTC](https://forums.concretecms.org/t/user-self-registration-protection/9010 "2025-04-20T16:01:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![FaganSystems](https://forums.concretecms.org/user_avatar/forums.concretecms.org/fagansystems/32/5351_2.png) [@FaganSystems](https://forums.concretecms.org/u/FaganSystems)\
**Post date:** [April 20, 2025, 4:01pm UTC](https://forums.concretecms.org/t/user-self-registration-protection/9010/1 "2025-04-20T16:01:22Z")

</div>

I want to enable the user self registration option but I want any requests to validate their email and then require an admin to confirm, reject etc the request, is this possible with 8.5.19?  
Or Will it require a new block to be written?

Thanks  
Martyn

---

<div class="post-metadata">

**Author:** ![TMDesigns](https://forums.concretecms.org/user_avatar/forums.concretecms.org/tmdesigns/32/4261_2.png) [@TMDesigns](https://forums.concretecms.org/u/TMDesigns)\
**Post date:** [April 20, 2025, 11:16pm UTC](https://forums.concretecms.org/t/user-self-registration-protection/9010/2 "2025-04-20T23:16:35Z")

</div>

As far as i know this is now all handled via the workflow options.

**Attach an approval workflow**  
Starting in 8.2 (and in all 9.x releases), “approve manually” leverages the workflow system:

- Go to System & Settings \> Permissions & Access \> Workflows and click Add Workflow.

- Give it a name (e.g. “User Activation”) and choose the Basic workflow type.

- In Tasks, click Approve or Deny, and under Included, add the user or group who will do approvals.

- Save the workflow.

- Next, go to System & Settings \> Permissions & Access \> Users Permissions.

- Find the Activate/Deactivate users permission, click Change Permissions, then open the Workflow tab.

- Select your new “User Activation” workflow and save.

**Approving or denying a registration**

Whenever someone registers:

New accounts appear as inactive.

- As an administrator, go to Dashboard \> Members (or use the Waiting for Me widget if you’ve set up workflows).

- Click an inactive user, choose Edit Details, then click Activate (or Deny).

---

<div class="post-metadata">

**Author:** ![FaganSystems](https://forums.concretecms.org/user_avatar/forums.concretecms.org/fagansystems/32/5351_2.png) [@FaganSystems](https://forums.concretecms.org/u/FaganSystems)\
**Post date:** [April 22, 2025, 10:52am UTC](https://forums.concretecms.org/t/user-self-registration-protection/9010/3 "2025-04-22T10:52:42Z")

</div>

Thanks Tim,  
Works perfectly on both 8.5,19 and 9.3.9

Cheers  
Martyn