We have never had to review any new members that joined, but we have started having to review and manually approve new members. The admins have not made any changes to settings. This started happening yesterday. Hoping for advice on how to fix this. Thanks so much!

@HSMMJ I think the problem you encountered has already been fixed with a recent deploy of your site considering that the site setting must approve users is disabled since 2019. I did some tests with the invitations on your site and everything seems to work properly now. Please contact us if any user should end up again in the review queue for the approval by the staff.

I think it may have to relate to the “must approve users” option that just got enforced more strictly on invites. See below: [image]Staff-generated invites bypass the must_approve_users requirement I am afraid I am making the very hard line call here that must_approve_users == VERY HARD LINE definition of explicit approval must be given. The trouble with implicit approval (which I originally approved) is that it is full of edge cases. Edge cases breed security problems and flaws in the system. Additionally, explaining edge cases regarding implicit approval is way too complicated and not a headache we need. If you go for must_approve_users we will take the absolute strictest definition and require you explicitly click approve on every single account regardless of invite vs not invite.

[image] Jim Kleiber: I think it may have to relate to the “must approve users” option that just got enforced more strictly on invites. One tricky side effect of this, if I understand correctly, is that staff invites issued to a specific email address will no longer be automatically approved on an instance with must_approve_users. I think this is not ideal, since staff’s inviting a specific user is implicit approval. That said, I understand the decision.

Yeah, the way I thought the change would work is making it so that one has to explicitly click approve on all users who joined through an anonymous invite link, not an invite that was tied directly to a specific email address. That those invites with specific email addresses would not override the must approve users. At least that’s how I interpreted the intent, I could be wrong on that and/or it could have been implemented differently. Maybe what I’m talking about are the edge cases that Sam mentioned not wanting to deal with.

Reviewing New Members

Product Support

HSMMJ (M J) June 7, 2022, 3:58am 10

Thank you so much for your help, @dax , @jimkleiber , and @agungor !

Topic		Replies	Views
Allow users invited by staff to skip approval Feature invites	21	2626	April 12, 2023
Why do I need to still approve users that I have invited? Product Support invites	2	794	July 7, 2022
Staff-generated invites bypass the must_approve_users requirement Feature invites	28	3218	June 3, 2022
Approval not triggering when sending an invite? Product Support approval , invites	3	240	October 30, 2020
Allow members to invite while "approval required"—or similar Feature invites	1	828	September 27, 2020

Reviewing New Members

Related topics