I have sucked into Alfresco 70k users and seems every single one of them have the ability to create their own sites. This is a bad thing as we want the IT group to manage site creation. Is there a way to limit who can create their own sites? If so how?
To easiest (although not prettiest) solution is to modify create-site.post.json.js in the Share webapp. You can either check some hard-coded uesrlist there, or call the repo for group membership, etc.
This will solve the immediate problem; the downside being users will still be able to go through the motions of creating sites.
Thanks for the information. Wow, so there is no security settings in the system for this huh? I've heard of Open but this is crazy if that's the case. Isn't Alfresco used heavily by corporations? Hard to believe companies let their users go wild with site creations.
It's not about issues. For my company it's about the ability to monitor and accountability. Even SharePoint people can be restricted from creating their own physical sites and has serious security around it to protect things.