Post in Being Invited to Join a Group
As we now require email addresses, rather than members, to be verified, the
scheme for adding new members changes a bit. While I am making a change to the
work-flow, I am also proposing a few changes to protect the privacy of people,
and hopefully get past spam-filters. Below is the sate-transition diagram for
an administrator creating a new group member, and inviting that member to join
a group. (I know that allowing anyone to invite other members to join a group
is a feature that many would like to see, but lets convert existing features
over first ☺)
The first step is to create a new user. The page for doing this would look very
similar to the existing Edit Profile page, except for
* An entry for the email address at the top, and
* An entry for a message to go to the new member.
The idea of the message is that it will add some text that will (hopefully)
make the invitation look less like spam.
Once the new member is created, an email message is sent out to that member.
The message will contain two links: one to accept the invitation, and one to
reject the invitation. If the user accepts, the email address is verified, and
the new member is taken to his or her new group.
If the new member *rejects* the message, then the user-instance in Zope is
deleted, and a message is sent to the support group logging the fact that an
administrator tried to add someone who did not want to belong to the group. In
the big scheme of things, the administrator invaded the person's privacy, which
is a Bad Thing. Hopefully the site administrators can step in and sort out the
errant group administrator if the membership-rejection is logged with the
support group for the site.
The following file was added to this topic: