# Invited user added to staff and mod automatic groups without being given admin or mod rights?

**URL:** https://meta.discourse.org/t/invited-user-added-to-staff-and-mod-automatic-groups-without-being-given-admin-or-mod-rights/32058
**Category:** Bug
**Created:** [August 13, 2015, 9:29am UTC](https://meta.discourse.org/t/invited-user-added-to-staff-and-mod-automatic-groups-without-being-given-admin-or-mod-rights/32058 "2015-08-13T09:29:29Z")
**Posts on this page:** 9
**Page:** 1

<div class="post-metadata">

### Author: ![kmvoges](https://avatars.discourse-cdn.com/v4/letter/k/ecb155/32.png) [@kmvoges](https://meta.discourse.org/u/kmvoges)
#### Post date: [August 13, 2015, 9:29am UTC](https://meta.discourse.org/t/invited-user-added-to-staff-and-mod-automatic-groups-without-being-given-admin-or-mod-rights/32058/1 "2015-08-13T09:29:29Z")

</div>

I invited a bunch of users to our discourse forum using batch invites. I only added them to a custom group named “Beta”

Now all of a sudden i see a user that has been added to the mod and admin groups without ever having been granted these rights. Whats wrong and how do I remove this user from the automatic groups mod/staf

 ![](https://global.discourse-cdn.com/meta/original/3X/9/f/9fe73e3a0423420c6f851201dae0208263e21984.png)

---

<div class="post-metadata">

### Author: ![kmvoges](https://avatars.discourse-cdn.com/v4/letter/k/ecb155/32.png) [@kmvoges](https://meta.discourse.org/u/kmvoges)
#### Post date: [August 13, 2015, 9:43am UTC](https://meta.discourse.org/t/invited-user-added-to-staff-and-mod-automatic-groups-without-being-given-admin-or-mod-rights/32058/2 "2015-08-13T09:43:55Z")

</div>

And this user can see and access the default Staf category.. I now changed the staf category settings so that only admins can see, but this shouldn’t be happening.

---

<div class="post-metadata">

### Author: ![kmvoges](https://avatars.discourse-cdn.com/v4/letter/k/ecb155/32.png) [@kmvoges](https://meta.discourse.org/u/kmvoges)
#### Post date: [August 13, 2015, 11:15am UTC](https://meta.discourse.org/t/invited-user-added-to-staff-and-mod-automatic-groups-without-being-given-admin-or-mod-rights/32058/3 "2015-08-13T11:15:31Z")

</div>

For some reason it has corrected itself. User profile no longer shows additions to the moderators or staf automatic groups and is not able to see the default staff category..

---

<div class="post-metadata">

### Author: ![kmvoges](https://avatars.discourse-cdn.com/v4/letter/k/ecb155/32.png) [@kmvoges](https://meta.discourse.org/u/kmvoges)
#### Post date: [August 13, 2015, 11:34am UTC](https://meta.discourse.org/t/invited-user-added-to-staff-and-mod-automatic-groups-without-being-given-admin-or-mod-rights/32058/4 "2015-08-13T11:34:35Z")

</div>

just followed a new user accepting my invitation, and it seems that every new user is first added to the mod and staff automatic groups and after a while it corrects itself:

 ![](https://global.discourse-cdn.com/meta/original/3X/5/a/5ad69f5fae417fcbb9437dfbb5b48468bc5ac5b8.png)

---

<div class="post-metadata">

### Author: ![kmvoges](https://avatars.discourse-cdn.com/v4/letter/k/ecb155/32.png) [@kmvoges](https://meta.discourse.org/u/kmvoges)
#### Post date: [August 13, 2015, 12:25pm UTC](https://meta.discourse.org/t/invited-user-added-to-staff-and-mod-automatic-groups-without-being-given-admin-or-mod-rights/32058/5 "2015-08-13T12:25:51Z")

</div>

So these users are added to an automatic group (moderator and staff):

 ![](https://global.discourse-cdn.com/meta/original/3X/2/0/20d414621383e1df085d715d58ef45753e4d223f.png) 

But in their settings they do not have mod rights (or admin for that matter) and they are not Staff users:

 ![](https://global.discourse-cdn.com/meta/original/3X/8/8/88434abcc742a17b6210be5ba6a412f6fce9626b.png)

And after (about) an hour the error corrects itself:

 ![](https://global.discourse-cdn.com/meta/original/3X/d/5/d5dec13f2b975698efe660bb9821bfbc0726f35e.png) 

As you can also see in the automatic group section.

 ![](https://global.discourse-cdn.com/meta/original/3X/2/4/24da1386077baa518fa26bb5a7a2578410a0b582.png)

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [August 13, 2015, 3:55pm UTC](https://meta.discourse.org/t/invited-user-added-to-staff-and-mod-automatic-groups-without-being-given-admin-or-mod-rights/32058/6 "2015-08-13T15:55:56Z")

</div>

Can you reproduce this @techapj?

---

<div class="post-metadata">

### Author: ![techAPJ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/techapj/32/342990_2.png) [@techAPJ](https://meta.discourse.org/u/techAPJ)
#### Post date: [November 27, 2015, 1:00pm UTC](https://meta.discourse.org/t/invited-user-added-to-staff-and-mod-automatic-groups-without-being-given-admin-or-mod-rights/32058/7 "2015-11-27T13:00:33Z")

</div>

@kmvoges I am not able to repro this issue. Are you still having this issue?

---

<div class="post-metadata">

### Author: ![techAPJ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/techapj/32/342990_2.png) [@techAPJ](https://meta.discourse.org/u/techAPJ)
#### Post date: [May 28, 2018, 11:59am UTC](https://meta.discourse.org/t/invited-user-added-to-staff-and-mod-automatic-groups-without-being-given-admin-or-mod-rights/32058/8 "2018-05-28T11:59:08Z")

</div>

This was a legit issue and is now fixed via:

[https://github.com/discourse/discourse/commit/c8bc942333f5cb0920a18d98b9f8b1baab2c9749](https://github.com/discourse/discourse/commit/c8bc942333f5cb0920a18d98b9f8b1baab2c9749)

---

<div class="post-metadata">

### Author: ![techAPJ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/techapj/32/342990_2.png) [@techAPJ](https://meta.discourse.org/u/techAPJ)
#### Post date: [May 29, 2018, 1:23am UTC](https://meta.discourse.org/t/invited-user-added-to-staff-and-mod-automatic-groups-without-being-given-admin-or-mod-rights/32058/9 "2018-05-29T01:23:38Z")

</div>


