admin/users: Add probation points

New feature in Mahara 1.9 (Bug #1252101):
Users can get probation points to prevent
them from adding links or make pages public.
This shall prevent spammers from misusing
public sites that allow self-registration.

source/administration/users.rst

@@ -133,6 +133,21 @@ You can perform a number of bulk actions for users on the *Bulk actions* page.
 #. Click the *Suspend* button to prevent these users from accessing their accounts.
 #. **Change authentication method**: Choose a new authentication method from the drop-down menu for the users listed on this page.
 #. Click the *Submit* button to change the authentication method to the new one.
+#. |new in Mahara 1.9| **Set spam probation**: :index:`Choose the number of points <single: New in Mahara 1.9; Probation status bulk change>` a user shall get to be "on probation" from the drop-down menu.
+#. Click the *Submit* button to change the number of probation points.
+
+   .. note::
+      This feature is only available on sites that have the 2 following values in their config.php file:
+
+      * ``$cfg->probationenabled = true;``: This setting decides that users can get a probation status.
+      * ``$cfg->probationstartingpoints = 2;``: This setting determines how many probation points a newly self-registered user has per default.
+
+      Newly self-registered users - no matter whether the institution requires explicit administrator confirmation or not - start out with a certain number of "probation points" on their account. While they have any probation points, they are considered a probationary user and cannot create public pages in their portfolio or post links or images to potentially public content such as comments, wall posts or forum posts.
+
+      Each time a probationary user makes a post in a forum, and the post is replied to by a non-probationary user, the probationary user loses one probation point. When the number of points reaches zero, they are no longer on probation.
+
+      Probation points have no effect on users who have staff or administrator status.
+
 #. Click the *Delete* button to delete accounts and all of their content of the users listed on this page.
 
 .. warning::
@@ -166,6 +181,8 @@ You can download basic user information for easier updating of these via a CSV f
 .. note::
    You can use this CSV file later on for updating existing accounts.
 
+   |new in Mahara 1.9| You only see the column **Probation** when the site has the :ref:`spam protection probation points enabled <site_account_settings>`.
+
 Access list
 ____________________
 
@@ -296,6 +313,7 @@ When the site administrator decided to :ref:`send notifications to users when an
    single: User tags
    single: Used user quota
    single: Disable bounced email addresses automatically
+   single: Spam protection; Probation status for new self-registered users
 
 .. _site_account_settings:
 
@@ -325,6 +343,20 @@ You can view and change a number of settings for a user's account.
 #. **Account expires**: Tick the check box if you want to specify an account expiration date. Once done, the date picker is activated for you to enter a date. Choose the date on which the user's login will be disabled automatically. The default setting is that the date is not specified. You always see the current date in the greyed out date fields. You can set an automatic account expiry date for all users in the :ref:`account settings of the site configuration <config_site_account_settings>`.
 #. **File quota**: Change the storage allowance for a user's personal files area. Institution administrators may not be able to update the quota if the site administrator disallowed that. The default value as set in the :ref:`files configuration <plugin_file>` in the plugin administration.
 #. **Quota used**: You can see how much this user has already used of their allocated quota.
+#. |new in Mahara 1.9| **Spammer probation status**: :index:`This setting controls <single: New in Mahara 1.9; Probation status for new self-registered users>` whether the user is considered to be on probation as a possible spammer.
+
+   .. note::
+      This feature is only available on sites that have the 2 following values in their config.php file:
+
+      * ``$cfg->probationenabled = true;``: This setting decides that users can get a probation status.
+      * ``$cfg->probationstartingpoints = 2;``: This setting determines how many probation points a newly self-registered user has per default.
+
+      Newly self-registered users - no matter whether the institution requires explicit administrator confirmation or not - start out with a certain number of "probation points" on their account. While they have any probation points, they are considered a probationary user and cannot create public pages in their portfolio or post links or images to potentially public content such as comments, wall posts or forum posts.
+
+      Each time a probationary user makes a post in a forum, and the post is replied to by a non-probationary user, the probationary user loses one probation point. When the number of points reaches zero, they are no longer on probation.
+
+      Probation points have no effect on users who have staff or administrator status.
+
 #. **Authentication method**: Choose the authentication method for this user. A site administrator can set up the authentication methods in the :ref:`institution administration <site_admin_institutions>`. Depending on the authentication method that you have chosen, you may have to provide a *remote username* to allow the user to log in.
 
    .. note::