We currently have no way to invite new users without manual admin intervention. We need to sort out the desired interfaces and mechanisms for it. For example, how does a group owner add a person to their group who doesn't yet have an account? There's good context in a prior discussion.
Considerations:
[ ] Ideally users are invited to self-create to pick their username, provide email they prefer, etc. (Though we can support modification of these attributes later.) This invitation can happen between users outside of nextstrain.org via other channels (e.g. "hey Tom, go sign up for a nextstrain.org user and tell me your username so I can add you to our group").
[ ] Invitation expiration?
[ ] Invitation revocation?
[ ] If we create invitations for new users, when do we move all new memberships in groups to invitations which are explicitly accepted/declined? Currently we allow any group owner to add any user to their group. This is an abuse/harassment vector, though hopefully not one we need to worry too much about at first.
We currently have no way to invite new users without manual admin intervention. We need to sort out the desired interfaces and mechanisms for it. For example, how does a group owner add a person to their group who doesn't yet have an account? There's good context in a prior discussion.
Considerations: