Team invitiation process glitch

Admin
1

I spotted a problem with the invitation flow, resulting in my joining a team with the wrong account.

  1. logged into netlify web app as user A (gitHub auth)
  2. invited to join a team as email B. ie different email address, and email client, with no Netlify account
  3. click on join button in email
  4. get added to the team as user A, not prompted to sign up as B and then added to team

I guess it needs an extra level of email/user checking to stop this happening.

Work around is probably to log out of Netlify in default browser so can sign up with a new account and join the team.

2

hi slim, great find! we’ll review. thanks!

4

PS, I doubt it goes that deep but Account A is a member of the some of the teams GitHub groups.

1 Like