-

2025-09-19 08:52:09

adminsforum@hubzilla.org

Beni Grind ~HB9HNT wrote the following post Fri, 19 Sep 2025 08:52:08 +0200

Hey all @!Hubzilla Support Forum

Today I tested registration with an invite code. When I registered a test channel with an invite code, I noticed that the newly registered account did follow two of my channels and was automatically approved, without email verification and without manual approval, even though I set both to required. Hence two questions:

1. What channels are automatically added to a newly registered account? Where can this be configured?

2. Is there a way to force someone to verify their email address, even though they have received an invite code of someone. I would also like to approve registrations - even if they received an invite from someone else.

Thanks, Beni

2025-09-19 09:21:15

Mario Vavti

mario@hub.somaton.com

The invite app makes some exceptions IIRC. This is because being invited and receiving the invite is already some sort of verification for the email address.
From the top of my head i think the inviter is being added as contact by the invitee automatically in this case.

EDIT: i also think it makes a difference if the inviter is the admin.

2025-09-19 10:19:22

Der Pepe (Hubzilla) ⁂

pepecyb@hub.hubzilla.hu

@Hubzilla Support Forum

I have just been able to reproduce this (a total of six tests on two different hubs). It is indeed the case that an account created with an invitation code is immediately approved and activated without any further action on the part of an administrator. However, I see this more as a convenience than a problem. When I send an invitation as an administrator, I want the recipient of the invitation email to create an account on my hub. I essentially grant approval with the invitation.

However, there is no risk that an account holder on my instance who does NOT have admin rights can send a working invitation. It is possible to install the ‘Invitation’ app with such a channel (a non-admin account). You can even open it and fill in the fields (i.e. with the target email address and additional text), but no email will be sent and no invitation code will be issued. You receive an error message. This means that third parties who have an account on our hub cannot invite strangers who would then have an activated account without the admin's permission.

At least, that is the result of my attempts.

The inviting channel does indeed seem to be automatically added as a contact.