"Email in allowed groups" setting is too permissive

joshwhit · January 30, 2024, 11:04am

Hi,

After some digging and testing I’ve found that if you tick “category mirrors a mailing list” this will skip validation as you can see here in the source code

github.com/discourse/discourse

lib/email/receiver.rb

main


      
                raw << "\n\n"
                raw << "[/details]"
              end
            end
          
            raw
          end
          
          def notify_about_rejected_attachment(attachments)
            errors = []
          
            attachments.each do |a|
              error = a.errors.messages.values[0][0]
              errors << "#{a.original_filename}: #{error}"
            end
          
            message = Mail::Message.new(@mail)
            template_args = {
              former_title: message.subject,
              destination: message.to,
              site_name: SiteSetting.title,

Once I unticked this option then the permissions worked as expected

This then allowed / disallowed based upon permissions as you would expect

Please can this be added to the documentation to help future users?

Thanks very much for your help Lilly.

Topic		Replies	Views
Configuring incoming email to create new topics or group messages Site Management how-to , email-in	3	25505	February 10, 2026
Creating a topic via email without write access to the category? Product Support	3	1809	January 11, 2019
Mirrored mailing list is rejecting registered forum users Bug	2	121	August 1, 2025
Category not accepting "anonymous email" from known users Bug	29	4242	June 12, 2026
How to create topics from a custom email address? Product Support email-in	8	482	August 15, 2024

"Email in allowed groups" setting is too permissive

Related topics