@techAPJ Just to clarify,
-
discourse/app/models/invite.rb at ab2c2ea60543f70621f930122b641e38e6913e06 · discourse/discourse · GitHub - This seems to be the piece of code which throws the error when there is an existing user with a given email address already present in the system. This code is same before & after the security fix commit (mentioned by you)
-
My question (in the first post of this topic) is more about invite/bulk invites scenarios where existing user are invited only to group (not about inviting to a topic/PM - which seems to be the security fix is largely about).
shouldn’t the existing user be added to the group (not topic/PM) before rejecting an invite creation - as per your earlier comments ?