تجاوز الدعوات التي أنشأها الموظفون متطلب must_approve_users

sam · 3 يونيو 2022، 5:39ص

لكل:

FIX: Approves user when redeeming an invite for invites only sites (#16984)

committed 03:43AM - 03 Jun 22 UTC

When a site has `SiteSetting.invite_only` enabled, we create a `ReviewableUser`…record when activating a user if the user is not approved. Therefore, we need to approve the user when redeeming an invite. There are some uncertainties surrounding why a `ReviewableRecord` is created for a user in an invites only site but this commit does not seek to address that. Follow-up to 7c4e2d33fa4b922354c177ffc880a2f2701a91f9

و

github.com/discourse/discourse

SECURITY: Remove auto approval when redeeming an invite (#16974)

committed 02:10PM - 02 Jun 22 UTC

gschlager

+56 -108

This security fix affects sites which have `SiteSetting.must_approve_users` ena…bled. There are intentional and unintentional cases where invited users can be auto approved and are deemed to have skipped the staff approval process. Instead of trying to reason about when auto-approval should happen, we have decided that enabling the `must_approve_users` setting going forward will just mean that all new users must be explicitly approved by a staff user in the review queue. The only case where users are auto approved is when the `auto_approve_email_domains` site setting is used. Co-authored-by: Alan Guo Xiang Tan <gxtan1990@gmail.com>

لقد انتهينا الآن.

@Wall-E، لا تتردد في إعادة البناء للحصول على آخر الإصلاحات.

الموضوع		الردود	مرات العرض
Allow users invited by staff to skip approval Feature invites	21	2154	12 أبريل 2023
Optional global invite code Announcements new-feature , invites	64	28927	1 ديسمبر 2023
Use an invite code to bypass new user approval? Feature	34	9192	15 مارس 2020
Invite redemption allowed user to access forum BEFORE approval Bug approval , invites	7	3191	15 يناير 2022
Reviewing New Members Support	6	583	7 يونيو 2022

تجاوز الدعوات التي أنشأها الموظفون متطلب must_approve_users

الموضوعات ذات الصلة