After some testing it appears that disapproved members of our sites can still change their password, can still be @mentioned and still get email notifications. It really seems like this shouldn't be the case. Is there a setting to turn this off?
After some testing it appears that disapproved members of our sites can still change their password, can still be @mentioned and still get email notifications. It really seems like this shouldn't be the case. Is there a setting to turn this off?
To follow up on the mentions, when a user is disapproved its not the same as deleting them. It stops them from logging in, etc but does not stop their visibility. Because of this they can still be searched, mentioned, etc
I have filed a bug to review this, but its a bit of a gray area in terms of expectation. It may end up this is intended and if you want a user gone they should ultimately be deleted
To follow up on the mentions, when a user is disapproved its not the same as deleting them. It stops them from logging in, etc but does not stop their visibility. Because of this they can still be searched, mentioned, etc
I have filed a bug to review this, but its a bit of a gray area in terms of expectation. It may end up this is intended and if you want a user gone they should ultimately be deleted