Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Notification on missing user activation #4187

Open
schris-dk opened this issue Sep 12, 2024 · 3 comments
Open

Notification on missing user activation #4187

schris-dk opened this issue Sep 12, 2024 · 3 comments

Comments

@schris-dk
Copy link

Proposal

I'd suggest that a notification is sent to the creator of a user, in case the activation link expires without being used, indicating, that the account hasen't been verified, and reception of incoming reports still is disabled for the particular user

Motivation and context

When dealing with multiple sites, it is hard to keep track of if a user actually have activated this/her account - this is currently only visible by logging into the particular site and view the status of the user. The missing account activation results in no message is sent regarding new reports. Sending a notification to the account creator, when a registration link has expired, gives the opportunity to re-notify the user to activate their account (e.g. if the activation mail has been registered as spam)

@evilaliv3
Copy link
Member

Thank you @schris-dk

I consider the topic interesting and important but i think the proposed solution is not very effective:

  • suppose i create your user; on expiration of your of your activation link i may be no longer working with the company
  • no others administrators will be informed of the situation
  • we will be generating then a lot but not useful nofifications

Probably we need alternatives like:

  • avoid mail notifications in general for such a feature
  • improve the UI of the management of users enabling to filter and find these sitiations
  • eventually implement for administrator a page where they could identify these or other important situations they should care about

What do you think? do you have any alternative idea?

I would like as well to precise that:

  • a recipient account is already active as soon that it is created even if the activation link is not used
  • if a recipient that has not activated the account receive a report, they will receive a mail noitification about the report and they may ask in that situation to get support for getting a new activation link; so in most of the situations it happens that administrators create accounts for users (e.g. 20 users) and do not send the activation link, till users effectively receive a report.

@evilaliv3 evilaliv3 removed the Triage label Sep 12, 2024
@schris-dk
Copy link
Author

Would it be possible to add the date, when the link was sent (instead of the exclamation mark) - and maybe a color code (red) when link has expired :-)

@evilaliv3
Copy link
Member

Thank you @schris-dk

I think definitely this changes could be added.
We will keep this helpful suggestion in mind and try to fund raise for the next major updates like this.

p.s.: are you aware to be running without escrow keys? (i understand this in relation to the fact that your users are not activated as soon that you create them)
If you enable escrow keys (as typically a provider do) regardless your users will set a password, their account will be active and they will just need your support eventually the first time they will receive a notification. In addition you will be able (as a provider) to support them in case they loose their password.
You find this option in the Advanced settings. The admin that enable it will have it enabled in their account and will be able to transfer the keys to other administrators (it is the privilege that you will see called "give this admin the possibility to change users password")

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

No branches or pull requests

2 participants