Uploaded image for project: 'MusicBrainz Server'
  1. MusicBrainz Server
  2. MBS-11942

Deleted users can still use pending verification links

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Normal Normal
    • 2021-12-13
    • None
    • Accounts
    • None

      If an editor has been sent a verification link, but is then deleted by an admin (or, I guess, by themselves?) before they use the link, they can click on it and get their email verified for their now deleted account. AFAICT that doesn't allow them to do anything with it, since they can't log in, but it's still kinda stupid and might potentially block reuse of that email address as a side effect.

            reosarevok Nicolás Tamargo
            reosarevok Nicolás Tamargo
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved:

                Version Package
                2021-12-13