When a admin enabled "require email confirmation", they themselves are locked out.

[coralproject]

When a admin enabled "require email confirmation", they themselves are locked out.

[wyattjoh]

@kgardnr could you weigh in on this?

[jde]

Two thoughts if we apply email verification retroactively:

As far as I understand, this shouldn't lock out the admin. The admin should try to log in, see they need to register, request a verification link, then be able to log in.

This move would force all users to do the same, and should be widely communicated to the user base well prior to the action.

Another option:

We could also only apply this to users registering while the setting is active.

[losowsky]

I like the first option. But for the beta would it save a lot of design/dev time to have this be something set up on install and not be changed?

[wyattjoh]

Another option, send the verification email always. That way when you turn it on, users always have the chance to verify it then.

[kgardnr]

I'm making the executive decision to go with @wyattjoh's suggestion above. We will break out any advanced functionality separately. Questions/concerns, please come directly to me.

[wyattjoh]

Resolved as of f488b0e