# Invite Limiting

**URL:** https://meta.discourse.org/t/invite-limiting/12366
**Category:** Feature
**Created:** [February 2, 2014, 3:58pm UTC](https://meta.discourse.org/t/invite-limiting/12366 "2014-02-02T15:58:25Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![GoogleWarriors](https://avatars.discourse-cdn.com/v4/letter/g/91b2a8/32.png) [@GoogleWarriors](https://meta.discourse.org/u/GoogleWarriors)
#### Post date: [February 2, 2014, 3:58pm UTC](https://meta.discourse.org/t/invite-limiting/12366/1 "2014-02-02T15:58:25Z")

</div>

Would be nice if the invite system was a bit more flexible. The ability to adjust amount of invites available to users maybe per trust level would be awesome. Similar to the way some of the private trackers handle things.

As it stands right now I don’t see any way to limit the invites a person can send once they are a member.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [February 2, 2014, 10:44pm UTC](https://meta.discourse.org/t/invite-limiting/12366/2 "2014-02-02T22:44:57Z")

</div>

Hmm, good point, @eviltrout we need to have some basic rate limiting around sending out invites.

This is a trust level 2 function so the risk is not super high – it’s not that easy to get to TL2 – but everything should be sanity rate limited just in case. If some TL2 person can send out 1,000 invites in a day, that’d be bad.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [July 2, 2014, 1:57pm UTC](https://meta.discourse.org/t/invite-limiting/12366/3 "2014-07-02T13:57:43Z")

</div>

@techapj can you make sure a rate limit is in place for invites sent by non-staff members?

---

<div class="post-metadata">

### Author: ![somjuan](https://avatars.discourse-cdn.com/v4/letter/s/e68b1a/32.png) [@somjuan](https://meta.discourse.org/u/somjuan)
#### Post date: [January 18, 2015, 9:16pm UTC](https://meta.discourse.org/t/invite-limiting/12366/4 "2015-01-18T21:16:06Z")

</div>

I’d like to throw my weight behind this feature request as well. It would be nice to either cap the number of invites available to members, or slowly release invites over time.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [January 18, 2015, 9:18pm UTC](https://meta.discourse.org/t/invite-limiting/12366/5 "2015-01-18T21:18:32Z")

</div>

We definitely need an enforced rate limit here for non staff users. @techapj can you bump this in your list. Things that are not rate limited make me very nervous.

---

<div class="post-metadata">

### Author: ![techAPJ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/techapj/32/342990_2.png) [@techAPJ](https://meta.discourse.org/u/techAPJ)
#### Post date: [January 19, 2015, 7:49pm UTC](https://meta.discourse.org/t/invite-limiting/12366/6 "2015-01-19T19:49:19Z")

</div>

PR sent for this feature:

[https://github.com/discourse/discourse/pull/3117](https://github.com/discourse/discourse/pull/3117)

---

<div class="post-metadata">

### Author: ![techAPJ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/techapj/32/342990_2.png) [@techAPJ](https://meta.discourse.org/u/techAPJ)
#### Post date: [January 20, 2015, 3:46pm UTC](https://meta.discourse.org/t/invite-limiting/12366/7 "2015-01-20T15:46:53Z")

</div>


