# 초대한 사용자를 왜 다시 승인해야 하나요?

**URL:** https://meta.discourse.org/t/why-do-i-need-to-still-approve-users-that-i-have-invited/232196
**Category:** Support
**Tags:** invites
**Created:** [7월 7, 2022, 10:05오전 UTC](https://meta.discourse.org/t/why-do-i-need-to-still-approve-users-that-i-have-invited/232196 "2022-07-07T10:05:50Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![gordon\_mrmoco](https://avatars.discourse-cdn.com/v4/letter/g/bb73d2/32.png) [@gordon\_mrmoco](https://meta.discourse.org/u/gordon_mrmoco)
#### Post date: [7월 7, 2022, 10:05오전 UTC](https://meta.discourse.org/t/why-do-i-need-to-still-approve-users-that-i-have-invited/232196/1 "2022-07-07T10:05:50Z")

</div>

포럼의 사용자는 초대하거나, 가입한 후 제가 승인하는 방식으로 추가할 수 있습니다.

이전에는 초대하면 단순히 수락만 하면 끝이었습니다.

하지만 최근에는 이유를 모르겠지만, 초대 후에도 가입자로 표시되어 검토 및 승인이 필요한 상태가 됩니다.

이유가 무엇이며, 이 기능을 어떻게 비활성화할 수 있을까요? 이미 초대했으므로 별도로 다시 승인하고 싶지 않습니다.

감사합니다

고든

---

<div class="post-metadata">

### Author: ![simonk](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/simonk/32/247950_2.png) [@simonk](https://meta.discourse.org/u/simonk)
#### Post date: [7월 7, 2022, 11:15오전 UTC](https://meta.discourse.org/t/why-do-i-need-to-still-approve-users-that-i-have-invited/232196/2 "2022-07-07T11:15:15Z")

</div>

보안상의 이유로 이 부분이 변경되었습니다:

> [@스태프가 생성한 초대 링크가 must\_approve\_users 요구 사항을 우회합니다](https://meta.discourse.org/t/staff-generated-invites-bypass-the-must-approve-users-requirement/228199?u=simonk):
>
> We’ve had a serious security issue with the invite system. I guess it’s easily reproducible. Our site is on invite-only. In addition, we have checked “must approve users” in the settings. One of our staff issued an invitation with a max use greater than 1, thus not restricted to one email in particular (example below). That invite link circulated, and people could register with it. Yet we expected that when “must approve users” is checked …

현재 우회 방법은 없습니다:

> [@스태프가 초대한 사용자는 승인 절차 생략 허용](https://meta.discourse.org/t/new-users-need-approval-despite-being-invited/231300/6?u=simonk):
>
> Yeah … long term solution I guess is to add a site setting that allows for the relaxed approval mode I guess, opt in. I worry though cause getting security right here is very very hard. The more edge cases we allow for, the more complexity and potential security flaws.

---

<div class="post-metadata">

### Author: ![gordon\_mrmoco](https://avatars.discourse-cdn.com/v4/letter/g/bb73d2/32.png) [@gordon\_mrmoco](https://meta.discourse.org/u/gordon_mrmoco)
#### Post date: [7월 7, 2022, 11:30오전 UTC](https://meta.discourse.org/t/why-do-i-need-to-still-approve-users-that-i-have-invited/232196/3 "2022-07-07T11:30:06Z")

</div>

정보 주셔서 정말 감사합니다! 🕶

---

<div class="post-metadata">

### Author: ![tobiaseigen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tobiaseigen/32/539204_2.png) [@tobiaseigen](https://meta.discourse.org/u/tobiaseigen)
#### Post date: [7월 7, 2022, 5:48오후 UTC](https://meta.discourse.org/t/why-do-i-need-to-still-approve-users-that-i-have-invited/232196/4 "2022-07-07T17:48:48Z")

</div>

게시물이 기존 주제에 병합되었습니다: [초대받았지만 신규 사용자는 승인 필요](https://meta.discourse.org/t/new-users-need-approval-despite-being-invited/231300/9)

---

<div class="post-metadata">

### Author: ![tobiaseigen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tobiaseigen/32/539204_2.png) [@tobiaseigen](https://meta.discourse.org/u/tobiaseigen)
#### Post date: [7월 7, 2022, 5:48오후 UTC](https://meta.discourse.org/t/why-do-i-need-to-still-approve-users-that-i-have-invited/232196/5 "2022-07-07T17:48:59Z")

</div>


