Hi All,
We are testing the "Add a New User to your Site" feature in OpenScholar and we are having a user role issue. Whenever some adds a person that does not already have a site, it creates the user in OpenScholar and gives them all the roles (including OpenScholar Admin) that are available on Openscholar. We want to limit that new user to only have access to the user's site and to edit through the green boxes (not the control panel), not have the ability to edit any site on OpenScholar.
We noticed this issue with sites that were created at the beginning of our testing. Anybody have any hints on how to lock down and assign one role to a person that is added as a user to a site by the site owner or why this would happen with sites that were created in the beginning of testing? Any roles bugs or issues we should be aware of? We are running Version 2.0-BETA12.
Thank you for you help!

Comments
We tried and cant actually
We tried and cant actually reproduce it.
Are you sure those users do not exist before you do "Add a New User to your Site"? Maybe someone added those users manually and assigned all the roles to them ?
Can you elaborate ?
Ferdi
Roles for new Users
Hi Ferdi,
No, these users were not in the system before they were added to another person's site, we made sure we added people that never had an account in Open Scholar prior to being added to another user's site.
As for "We noticed this issue with sites that were created at the beginning of our testing.", the issue seems to be with sites that were first created when we deployed OpenScholar (on the first couple of days). After a couple of weeks of running OpenScholar, we did not have these role issues with adding new user to a site with the newer sites, but we did with the very first sites we created. We are not sure why this is happening. Is there any setting we can change or something we need to purge so that when we add a new user to a person's site (if that site was created in the first few days) they will only have that one role and not all the roles in OpenScholar?
Having the same issue
Using OS Drupal 6 Beta13 and if I use the "add a user to your site" option and choose "add new user" within that form, it will assign that user every role possible once the user is created.
However, if you add a user that already exists through the "Find an existing user" search box, the user's role will be determined by what they were already assigned. So, if a user was already assigned, say, "scholar admin," they would still just be a a "scholar admin."