If 'createemailregexp' is empty, only admins can create an account for users. If it's not empty, everybody having an email address matching this regexp can create an account. We should have an intermediate "level": let users request an account, but let admins approve the request. For instance: the regexp could be /\@my_company.com$/, then someone requests an account for newbie@company.com and an admin has to say yes or no for this account (e.g. he could deny it because the installation is restricted to some employees of some department only). If the request is approved, the user will get the usual email with a link to confirm the account creation, else he will get an email explaining that the request has been rejected, eventually with an explanation from the admin (the admin would have a free text box where he can explain why he denies the request).

This seems to be a much needed feature for a lot of deployments. Holding account creations in a queue and notifying the admin for approval doesn't seem to hard to implement. Then again, I'm not familiar with the Bugzilla codebase. Any chance of getting this feature on the radar for an upcoming release?