Index: openacs-4/packages/dotlrn/www/user-add.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/dotlrn/www/user-add.tcl,v
diff -u -r1.29 -r1.29.2.1
--- openacs-4/packages/dotlrn/www/user-add.tcl	7 Nov 2003 16:08:15 -0000	1.29
+++ openacs-4/packages/dotlrn/www/user-add.tcl	31 Mar 2004 23:06:17 -0000	1.29.2.1
@@ -24,23 +24,23 @@
     @version $Id$
 } -query {
     {type student}
-    {can_browse_p 1}
-    {read_private_data_p t}
+    {can_browse_p 0}
+    {read_private_data_p f}
     {add_membership_p t}
     {dotlrn_interactive_p 0}
     {referer members}
 } -properties {
     context_bar:onevalue
 }
+# Set read_private_data_p and can_browse_p to me the most restrictive defaults.
 
 set current_user_id [ad_maybe_redirect_for_registration]
 set community_id [dotlrn_community::get_community_id]
 
-if {$read_private_data_p || $can_browse_p} {
-    dotlrn::require_admin
-}
+# If can_browse_p is 0, this means the new user would be able to join 
+# all communities.  It requires a site-wide administrator to add such a user.
     
-if {![empty_string_p $community_id]} {
+if {![empty_string_p $community_id] && $can_browse_p == 0} {
     dotlrn::require_user_admin_community -community_id [dotlrn_community::get_community_id]
     set context [list [list "one-community-admin" [_ dotlrn.Admin]] [_ dotlrn.Add_User]]
     set community_p 1