如何允许 Web 应用程序向系统添加用户？
在我的应用程序中，我有一个名为“组”的东西，任何用户都可以创建它。然后，用户可以将成员添加到该组。现在，该会员可能已经在系统中注册，或者是系统中的全新会员。对于“在系统中”的用户来说，这很容易，但对于“尚未在系统中”的用户，我的困境是是否预先注册新用户并向用户发送一封电子邮件，说明所发生事件的所有详细信息。
现在，管理员可能拼错了会员的电子邮件地址，导致其发送到了错误的电子邮件地址。因此，对于刚刚收到电子邮件的新用户来说，他们可能会认为系统通过自动注册他们来发送垃圾邮件。
我在想在管理员添加到群组之前是否必须强制用户预先注册？
一种选择是当管理员将新用户（尚未在系统中）添加到组时，用户的电子邮件会添加到组中，但不会向新用户发送电子邮件。当用户愿意使用同一电子邮件注册时，则该用户已经是该组的一部分。
现在，网络应用程序如何处理新电子邮件地址有多种选择
如果电子邮件地址不存在，则创建一个新用户，将带有临时密码的激活链接发送到该电子邮件地址
网络应用程序会忽略电子邮件地址并通知团队管理员让用户在添加到团队之前进行预注册。< /p>
1 更方便、更好的用户体验，但有人可能会滥用系统发送垃圾邮件
2 很安全，因为团队管理员和成员在加入 web 应用程序之前已经进行了沟通，他们进行了注册，然后管理员可以添加用户作为自己的团队成员。
webapp如何处理这种情况？最佳实践是什么？
In my app, i have something called "groups" which any user can create. The user can then add members to this group. Now this member could be already registered in the system or is a totally new to the system. For "in the system" users, it is easy but for "not yet in the system" my dilemma was whether to pre-register the new user and send the user an email saying all the details of what happened.
Now, the admin could have misspelled the members email and it went to the wrong email address. So for the new user who just received email, they might think the system is sending spam by auto-registering them.
I was thinking should it be mandatory for the user to be pre-registered before the admin could add to the group?
One option is when the admin adds new users(not yet in the system) to the group, the user's email is added to the group but there is no email sent to the new user. The user when willingly registers using the same email, then the user is already part of the group.
Now there are multiple options how the webapp treats the new email addresses
If the email address does not exist, then create a new user, send an activation link with temporary password to the email address
The webapp ignores the email address and notifies the Team admin to have the user pre-register prior to getting added to the team.
1 is more convenient and a better user experience but it has potential for someone to abuse the system for spamming
2 Is safe as the team admin and the member have already communicated prior to joining into the webapp, they register and then the admin can add the user as its own team member.
How do webapp handle these kind of situation? What is the best practice?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
如果没有更多细节，很难回答，但如果用户可以将自己添加到系统中，那么管理员的价值是什么？
我建议不要这样做，它只会侵犯大多数租户的安全。如果用户可以预先注册，那么您就掌握了有关他们的一些信息。我会让管理员使用已知的电子邮件地址将它们添加到系统中。当用户自行注册时，如果找不到电子邮件，则会向管理员发送通知，管理员可以决定是否添加用户或修复拼写错误。拼写错误应该很少发生（不是常态），因此大多数时候用户应该能够立即激活自己。
Without more details its hard to answer, but if users can add them selves to a system what is the value of admins?
I would advise against that, it just violates most tenants of security. If the users can be preregistered than you have some information about them. I would let the admins add them to the system with the known email address. When the user goes to register them self, if the email is not found send a notice to an admin, who can decide whether to add the user or fix the typo. The typo should be the rare occurrence (not the norm), so users should be able to activate themselves immediately most of the time.