one of the journals we host requires reader accounts, as some content is subscription-only, but all new accounts are registered by the journal manager. Visitors can not create their own accounts, for any role.
However, once a person was registered as a reader by the journal manager, they can give themselves the additional role of author and/or reviewer if they go to View Profile and find the Roles tab in the Backend. I can see why there’s no harm in changing your role for a journal that allows users to register their own accounts, but this feels like a bug. Can this be changed?
This sort of ties in with a problem brought up in this topic on disabling the submission option, because readers can submit articles, which they should not be allowed to. Has there been any progress on that one? I checked for it in the issues assigned to 18.104.22.168 and 3.2, but it doesn’t seem to be there.
Because readers can currently submit articles, being able to change their role to author/reviewer doesn’t have much of an effect, but they’re not meant to be able to do that in the first place.
I’d appreciate any help on this!