# Invalid invite fields when creating invite as a moderator

**URL:** https://meta.discourse.org/t/invalid-invite-fields-when-creating-invite-as-a-moderator/343783
**Category:** Bug
**Tags:** invites, ux
**Created:** [December 21, 2024, 12:21pm UTC](https://meta.discourse.org/t/invalid-invite-fields-when-creating-invite-as-a-moderator/343783 "2024-12-21T12:21:57Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![Zeemah](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zeemah/32/252179_2.png) [@Zeemah](https://meta.discourse.org/u/Zeemah)
#### Post date: [December 21, 2024, 12:21pm UTC](https://meta.discourse.org/t/invalid-invite-fields-when-creating-invite-as-a-moderator/343783/1 "2024-12-21T12:21:57Z")

</div>

Hi,

When creating a new invite via `[..site..]/new-invite` as a moderator, it allows for the invite to add the invitee to a group. Despite this not allowing the moderator to do so (returning a 403), the drop down box still is available. See below:

 ![](https://global.discourse-cdn.com/meta/original/4X/b/5/3/b538d13d4ba312cdbf0bd6c10345a07002ac048e.png)

Nothing exploitable, so probably UX than bug(?)

Merry Christmas 🎅

* * *

Error message:  
An error occurred: You are not permitted to view the requested resource.

---

<div class="post-metadata">

### Author: ![NateDhaliwal](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/natedhaliwal/32/313494_2.png) [@NateDhaliwal](https://meta.discourse.org/u/NateDhaliwal)
#### Post date: [December 21, 2024, 2:13pm UTC](https://meta.discourse.org/t/invalid-invite-fields-when-creating-invite-as-a-moderator/343783/2 "2024-12-21T14:13:15Z")

</div>

Any errors in the console or in `/logs`?

---

<div class="post-metadata">

### Author: ![Zeemah](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zeemah/32/252179_2.png) [@Zeemah](https://meta.discourse.org/u/Zeemah)
#### Post date: [December 21, 2024, 3:11pm UTC](https://meta.discourse.org/t/invalid-invite-fields-when-creating-invite-as-a-moderator/343783/3 "2024-12-21T15:11:27Z")

</div>

Yes, as this is unintended behaviour. So submitting a request to somewhere without enough access throws an error.

---

<div class="post-metadata">

### Author: ![mcwumbly](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mcwumbly/32/103861_2.png) [@mcwumbly](https://meta.discourse.org/u/mcwumbly)
#### Post date: [December 21, 2024, 8:05pm UTC](https://meta.discourse.org/t/invalid-invite-fields-when-creating-invite-as-a-moderator/343783/5 "2024-12-21T20:05:13Z")

</div>

> [@Zeemah](#):
>
> Despite this not allowing the moderator to do so (returning a 403), the drop down box still is available

The drop-down should probably only show for any admin or group owner.

> [@Configuring how users can create and send invites for others to join your community](https://meta.discourse.org/t/configuring-how-users-can-create-and-send-invites-for-others-to-join-your-community/124096/1):
>
> Group owners and site admins can invite new users to a group from the group’s page

(Non admin group owners should probably only be able to select a group that they own).

---

<div class="post-metadata">

### Author: ![southpaw](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/southpaw/32/79352_2.png) [@southpaw](https://meta.discourse.org/u/southpaw)
#### Post date: [January 30, 2025, 1:23pm UTC](https://meta.discourse.org/t/invalid-invite-fields-when-creating-invite-as-a-moderator/343783/7 "2025-01-30T13:23:40Z")

</div>

> [@mcwumbly](#):
>
> The drop-down should probably only show for any admin or group owner.

Instead of _hiding_ the drop-down box from a moderator who is not an owner of any group, would it be possible to show the drop-down box with only a message of “You are not the owner of any groups”?

Such a message would give the moderator and their admin a better grasp of how to populate the field so that the moderator can accomplish their task of inviting a user while adding the user to a group.