# Users incorrectly getting group membership upon joining

**URL:** https://meta.discourse.org/t/users-incorrectly-getting-group-membership-upon-joining/105785
**Category:** Support
**Created:** [January 6, 2019, 2:08am UTC](https://meta.discourse.org/t/users-incorrectly-getting-group-membership-upon-joining/105785 "2019-01-06T02:08:04Z")
**Posts on this page:** 16
**Page:** 1

<div class="post-metadata">

### Author: ![jtbayly](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jtbayly/32/119510_2.png) [@jtbayly](https://meta.discourse.org/u/jtbayly)
#### Post date: [January 6, 2019, 2:08am UTC](https://meta.discourse.org/t/users-incorrectly-getting-group-membership-upon-joining/105785/1 "2019-01-06T02:08:04Z")

</div>

At least twice we’ve had members join upon invitation from admins _without_ specifying that the invite includes a group membership, only to have them gain the membership immediately upon signing up. Is there some setting I’m not aware of that could be playing into this behavior?

Thanks in advance.

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [January 6, 2019, 3:28am UTC](https://meta.discourse.org/t/users-incorrectly-getting-group-membership-upon-joining/105785/2 "2019-01-06T03:28:51Z")

</div>

Are these invites are sent from `/my/invited`, or somewhere else? The only other “auto add to group” feature that I can think of is the email domain option within group settings:

 ![image](https://global.discourse-cdn.com/meta/original/3X/a/c/ac09658f8181b928308b28a8114e1848d32332b1.png)

---

<div class="post-metadata">

### Author: ![jtbayly](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jtbayly/32/119510_2.png) [@jtbayly](https://meta.discourse.org/u/jtbayly)
#### Post date: [January 6, 2019, 3:34am UTC](https://meta.discourse.org/t/users-incorrectly-getting-group-membership-upon-joining/105785/3 "2019-01-06T03:34:19Z")

</div>

From the button at the bottom of a topic.

We aren’t using that email setting.

Not sure what to say. We’ve successfully bulk invited people and added them to the necessary groups. These were just a couple of one-off invites to particular conversations we thought somebody would be interested in. Both of us who did the invites are admins but didn’t select to add the person to any groups.

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [January 6, 2019, 3:35am UTC](https://meta.discourse.org/t/users-incorrectly-getting-group-membership-upon-joining/105785/4 "2019-01-06T03:35:24Z")

</div>

Is the topic you’re inviting the users to in an open category, or does the category have security on it?

---

<div class="post-metadata">

### Author: ![jtbayly](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jtbayly/32/119510_2.png) [@jtbayly](https://meta.discourse.org/u/jtbayly)
#### Post date: [January 6, 2019, 3:37am UTC](https://meta.discourse.org/t/users-incorrectly-getting-group-membership-upon-joining/105785/5 "2019-01-06T03:37:01Z")

</div>

everyone can reply/see  
only the group members can Create / Reply / See

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [January 6, 2019, 3:38am UTC](https://meta.discourse.org/t/users-incorrectly-getting-group-membership-upon-joining/105785/6 "2019-01-06T03:38:15Z")

</div>

Hmm…I don’t think we auto-invite based on category security, but let me test quick.

---

<div class="post-metadata">

### Author: ![jtbayly](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jtbayly/32/119510_2.png) [@jtbayly](https://meta.discourse.org/u/jtbayly)
#### Post date: [January 6, 2019, 3:39am UTC](https://meta.discourse.org/t/users-incorrectly-getting-group-membership-upon-joining/105785/7 "2019-01-06T03:39:18Z")

</div>

Related question. I logged in with a test account and I don’t see the invite button. Is that limited to admins?

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [January 6, 2019, 3:41am UTC](https://meta.discourse.org/t/users-incorrectly-getting-group-membership-upon-joining/105785/8 "2019-01-06T03:41:05Z")

</div>

Invite is a TL2 level feature, so new users don’t have access to it.

> [@jomaxro](#):
>
> let me test quick

That’s not it - my invited user was not added to a the group with create permissions.

I’m out of ideas, we’ll see if anyone else has suggestions…

---

<div class="post-metadata">

### Author: ![jtbayly](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jtbayly/32/119510_2.png) [@jtbayly](https://meta.discourse.org/u/jtbayly)
#### Post date: [January 6, 2019, 3:48am UTC](https://meta.discourse.org/t/users-incorrectly-getting-group-membership-upon-joining/105785/9 "2019-01-06T03:48:43Z")

</div>

FWIW, I’ve not had it happen consistently. First time I passed it off as a fluke. Second time (at least it being noticed) was another admin. I don’t believe in coincidences, ie the same fluke happening twice, so I thought I better report it.

---

<div class="post-metadata">

### Author: ![jtbayly](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jtbayly/32/119510_2.png) [@jtbayly](https://meta.discourse.org/u/jtbayly)
#### Post date: [January 7, 2019, 8:32pm UTC](https://meta.discourse.org/t/users-incorrectly-getting-group-membership-upon-joining/105785/10 "2019-01-07T20:32:28Z")

</div>

Just had it happen again. An admin used the invite button at the bottom of a topic.

Is it possible the order of the permissions matters?

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [January 7, 2019, 8:34pm UTC](https://meta.discourse.org/t/users-incorrectly-getting-group-membership-upon-joining/105785/11 "2019-01-07T20:34:54Z")

</div>

I’ve been trying to repro this, no luck so far. Let me make sure I’m mirroring your config as closely as I can:

This category is reply/see to everyone, and create/reply/see to a single group (let’s call it `foo`)? Group `foo` is closed, you must be added by an admin or group owner? Users invited to the topic by admins are (sometimes) ending up in group `foo`?

Is all that correct?

---

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [January 7, 2019, 8:36pm UTC](https://meta.discourse.org/t/users-incorrectly-getting-group-membership-upon-joining/105785/12 "2019-01-07T20:36:04Z")

</div>

Are you running latest? If I remember correctly we changed behavior around this recently.

---

<div class="post-metadata">

### Author: ![jtbayly](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jtbayly/32/119510_2.png) [@jtbayly](https://meta.discourse.org/u/jtbayly)
#### Post date: [January 7, 2019, 8:39pm UTC](https://meta.discourse.org/t/users-incorrectly-getting-group-membership-upon-joining/105785/13 "2019-01-07T20:39:32Z")

</div>

No we aren’t. About a month old. Any idea when the change might have been?

I just updated our staging site and I’ll try to repro it there.

Edited to add: I just found the group log, and it says that the person was added by “system.”

---

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [January 7, 2019, 8:51pm UTC](https://meta.discourse.org/t/users-incorrectly-getting-group-membership-upon-joining/105785/15 "2019-01-07T20:51:00Z")

</div>

> [@jtbayly](#):
>
> I just updated our staging site and I’ll try to repro it there.

Please do, it should be fixed in latest.

---

<div class="post-metadata">

### Author: ![jtbayly](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jtbayly/32/119510_2.png) [@jtbayly](https://meta.discourse.org/u/jtbayly)
#### Post date: [January 7, 2019, 9:02pm UTC](https://meta.discourse.org/t/users-incorrectly-getting-group-membership-upon-joining/105785/17 "2019-01-07T21:02:01Z")

</div>

So far attempts to reproduce on latest have failed. My apologies to both of you for taking up your time.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [January 7, 2019, 11:49pm UTC](https://meta.discourse.org/t/users-incorrectly-getting-group-membership-upon-joining/105785/18 "2019-01-07T23:49:19Z")

</div>


