Jarek Radosz 704778f448
FIX: Don't invite new users via group with SSO on or local logins off (#11950)
Issue originally reported in https://meta.discourse.org/t/bypass-sso-by-adding-unkown-email-to-group/177339

Inviting people via email address to a group when SSO is enabled (or local logins are disabled) led to a situation where user records were being created bypassing single sign-on.

We already prevent that in most places. This adds required checks to `GroupsController`.
2021-02-03 18:13:00 +01:00
..
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-01-26 14:52:35 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-01-05 14:27:00 +01:00
2021-01-12 14:29:05 +01:00
2021-01-05 14:27:00 +01:00
2021-01-05 14:27:00 +01:00
2021-02-02 14:37:52 +01:00
2020-12-29 19:44:53 +01:00
2021-01-05 14:27:00 +01:00
2021-02-02 14:37:52 +01:00
2021-01-05 14:27:00 +01:00
2021-01-20 22:58:26 +01:00
2021-02-02 14:37:52 +01:00
2020-12-29 19:44:53 +01:00
2021-01-19 16:14:59 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2020-11-10 15:23:06 +01:00
2021-02-02 14:37:52 +01:00
2020-10-30 16:06:32 +01:00
2021-02-02 14:37:52 +01:00
2021-01-12 14:29:05 +01:00
2021-02-02 14:37:52 +01:00
2020-10-17 00:07:21 +02:00
2020-10-17 00:07:21 +02:00
2021-01-05 14:27:00 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-01-05 14:27:00 +01:00
2021-01-19 16:14:59 +01:00
2021-02-02 14:37:52 +01:00
2021-01-05 14:27:00 +01:00
2021-02-02 14:37:52 +01:00
2021-01-05 14:27:00 +01:00
2020-10-06 15:43:13 +02:00
2021-02-02 14:37:52 +01:00
2021-01-05 14:27:00 +01:00
2020-12-29 19:44:53 +01:00
2020-10-17 00:07:21 +02:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2021-02-02 14:37:52 +01:00
2017-02-24 11:35:33 +01:00