Password reminders are not sent to staged users

Feature
1

Case:

  • Staged user requests mail to reset password
  • Nothing happens

The staged user was created by sending a mail to a secured category, in case that makes any difference.

2

I think this is expected behavior, as they don’t have an actual account, so the idea is they register an account using the same email address that is currently staged.

3 Likes
3

It might be good to have more of a story here on exactly what the user wants to do, and what happened to that user that made them want to do that. With some examples!

4

I’ll think of one. But I can add this is related to this where a staged user is ‘invited’ in a way because the notification mails say they can visit their topic. Which is actually not true.

And because of that they might want to reset their password, as they don’t have one.

5

As I discussed here, @yanokwa and I just migrated a list with about 3k users using the experimental mbox importer. This script imports all users as staged users meaning they can’t use the password reset feature. As far as we could tell, we had two options:

  1. leave users staged and have community members create new users. When creating a new user, they would get no feedback on whether the email address they used matched an existing user so the risk of them creating users unrelated to their own staged user would be high. Also, they wouldn’t be able to use the same username as their staged user.
  2. unstage users so community members could use the password reset feature and get confirmation that they were using the same email address as they used on the old list. They would start receiving email from Discourse before explicitly claiming their account.

We ended up going with the second option and so far it seems like it hasn’t caused too much confusion. That said, it would have been ideal if staged users could reset their passwords to claim their full accounts.

3 Likes