SECURITY BUG - Approved members can add new members without admin approval
closed
Jose Garcia
Approved members can add anyone they want, and the admins have no control over this. Additionally, members can change their own addresses, allowing members added by others to alter their addresses without admin approval. This means that admins approve members based on the provided information, but members can change it afterward. It is a total mess.
Log In
Meredith Owens
closed
To clarify, this isn't a bug on our system, so we'll be closing this post.
On our platform, a member represents an individual registered on your website (e.g., John Doe). An account groups members and addresses and typically represents a single household in the community (e.g., John and Jane Doe at 123 Oak Road). Therefore, an account most commonly contains multiple members. This capability is intended for additional members who live within a household (most often a spouse, children, or a relative) to be added to an existing account, not for registering other members in general.
We certainly understand how you would want the ability to approve newly added members to an account, which is why we’re looking into developing this open feature request: https://feedback.hoa-express.com/feature-requests/p/approve-new-members-on-an-account.
In the meantime, all actions and changes made on the website are posted under the “Activity log” in the Admin Portal for full administrators to view. Therefore, if a member added someone else to their account, you could see who that was. Then, if you decide they shouldn’t be on the website, you can remove that individual from the account in the “Members” section in the Admin Portal.
With regards to addresses, an administrator can add, update, or remove an address on an account from the “Account view” in the “Members” section at any time.
Jose Garcia
This security bug can be fix it just adding the flag of new member when they are created. So Admins can see them in the "Review new accounts" section