Not understanding Security, or, it's not working correctly

I have built a small sample project using SCv6 x18. I used the Wizard to build a security module, that requires the user to validate by email. When a new user registers, SC will send the administrator this notice:

New user registered in the system!
User: Joe Smith
E-mail: Joe.Smith@telus.net

That part is OK, however…

The title of this email is: “Retrieve Password” <------ Which is wrong, I think.

And… NO email is sent to the new user so that they can validate. So the new user can never log in, because they are never validated.

Also, as administrator, once I get through the security login screen, I see the app that allows me to manage security. In fact, EVERY user that I can log in as (after manually setting their record to “Validated”) is shown the same security app, as if they were an admin, and they can proceed to change/delete other users accounts.

Is something scrambled with my security module? How do I fix it?

Re: Not understanding Security, or, it’s not working correctly

What I expect to happen is that an email is sent to the newly registered user, so they can validate. Then, when the new user logs in, they are shown my application(s), not the security module used by the administrator.

Re: Not understanding Security, or, it’s not working correctly

I rebuilt the security module. I used the groups/apps this time (not just “User”). Same thing happened. I registered as a new user, and an email was sent to the admin, titled “Reset Password”, and no link was sent to the user, for them to validate. I’m using SCv6 6.00.018.