# Change email after registering and pending activation?

**URL:** https://meta.discourse.org/t/change-email-after-registering-and-pending-activation/68243
**Category:** Bug
**Created:** [17 augustus 2017 om 15:02 UTC](https://meta.discourse.org/t/change-email-after-registering-and-pending-activation/68243 "2017-08-17T15:02:05Z")
**Posts on this page:** 1
**Showing post:** 16

<div class="post-metadata">

### Author: ![eviltrout](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eviltrout/32/5275_2.png) [@eviltrout](https://meta.discourse.org/u/eviltrout)
#### Post date: [4 september 2017 om 16:58 UTC](https://meta.discourse.org/t/change-email-after-registering-and-pending-activation/68243/16 "2017-09-04T16:58:31Z")

</div>

The issue here is someone doesn’t ever want users to change their emails, and they were allowed to do so following approval if they hadn’t activated their original email. It doesn’t seem like a security hole to me since the user still had the authenticate the email, but I understand in some rare situations forum owners don’t want users to change their emails.

The solution is what’s suggested earlier: don’t allow staff to approve a user until they’ve confirmed their email address.

> <https://github.com/discourse/discourse/commit/db929e58fc02923ddc2d09add5103aaba73c027f>

---

_[View the full topic](https://meta.discourse.org/t/change-email-after-registering-and-pending-activation/68243)._
