define default user role for new user

apps/app/src/server/models/user.js

@@ -294,6 +294,7 @@ const factory = (crowi) => {
     this.isEmailPublished = configManager.getConfig(
       'customize:isEmailPublishedForNewUser',
     );
+    this.readOnly = configManager.getConfig('customize:isReadOnlyForNewUser');
 
     this.save((err, userData) => {
       userEvent.emit('activated', userData);
@@ -613,6 +614,9 @@ const factory = (crowi) => {
       newUser.lang = globalLang;
     }
 
+    newUser.readOnly =
+      configManager.getConfig('customize:isReadOnlyForNewUser') ?? false;
+
     try {
       const newUserData = await newUser.save();
       return {
@@ -703,6 +707,9 @@ const factory = (crowi) => {
       'customize:isEmailPublishedForNewUser',
     );
 
+    newUser.readOnly =
+      configManager.getConfig('customize:isReadOnlyForNewUser') ?? false;
+
     const globalLang = configManager.getConfig('app:globalLang');
     if (globalLang != null) {
       newUser.lang = globalLang;

apps/app/src/server/service/config-manager/config-definition.ts

@@ -200,6 +200,7 @@ export const CONFIG_KEYS = [
 
   // Customize Settings
   'customize:isEmailPublishedForNewUser',
+  'customize:isReadOnlyForNewUser',
   'customize:css',
   'customize:script',
   'customize:noscript',
@@ -918,6 +919,10 @@ export const CONFIG_DEFINITIONS = {
     envVarName: 'DEFAULT_EMAIL_PUBLISHED',
     defaultValue: true,
   }),
+  'customize:isReadOnlyForNewUser': defineConfig<boolean>({
+    envVarName: 'DEFAULT_USER_READONLY',
+    defaultValue: false,
+  }),
   'customize:css': defineConfig<string | undefined>({
     defaultValue: undefined,
   }),