Auto-cancel old Pending Invitations
Phill Coxon PublicSeen by 68Currently when loomio invites are sent but not activated they appear to sit in the Pending Invitations list indefinitely.
Given the likelihood of someone clicking an activation link that has been waiting for 30+ days is extremely remote, would it make sense to auto-cancel pending activations after 30 days?
Possibly a good idea for general security as well: someone's email gets compromised and the attacker uses an activation link long since forgotten about...
Really appreciating your feedback @phillcoxon! Would you be interested in having a catchup at some point? Would be really keen to hear any other thoughts you've got :)
@hannahsalmon - @benjaminknightloom already asked. We should be catching up on Monday afternoon :) Also in Wgtn next Friday and will be hanging around for Fri night drinks / chats.
Ok @phillcoxon sounds great. Haha, Benjamin Knight eh - never a missed beat!
i think the best is each group to choose their own date (for example 30 days, or 3 months, or 6 months, or not expiring at all) that will expire... And that's why because each group may has some different rules and that will cost time to groups re-invite again and again.
@christaklis I'm not so sure about this. The point of invitations is to invite someone in now, not anytime in the next 2 years, right? Non-expiring invitations clutter up the group admin screen and represent a potential security risk - someone's email gets compromised and the link used by someone else at some point i the future.
It's super easy to re-invite someone again if an invitation has expired. Likewise users can request to join a group themselves.
Maybe just a button that says "clear all invitations older than ____ days" on the member's screen?
@alanna that's better proposal you say!
Another good idea. Will add to inbox.