upstage-org / upstage

UpStage is a platform for cyberformance: remote players combine digital media in real-time for an online audience. All you need is a web browser!
https://upstage.org.nz
GNU General Public License v3.0
21 stars 0 forks source link

Configuration: email addresses #1225

Open helenvarley opened 8 months ago

helenvarley commented 8 months ago

can there be another tab in the Configuration section of the Admin section, that is for email configuration? this would allow Admins to:

i realise the first point might involve some complexity to do with email servers, but if we don't have a way for people to set their own email address(es) here then we are going to have to find some other way to manage it. from a privacy perspective we should not be receiving registrations for instances we are hosting for other organisations, or for example on the mur.at instance which is on their own server.

gloriajw commented 8 months ago

I would argue that we should see all of these emails from other organizations. They are piggybacking off of our mail service. If they ever get hacked, our service gets shut down for spam. We absolutely do need to see what emails get sent using our service, and if too many are going out, etc. We cannot rely on each client to watch this.

helenvarley commented 8 months ago

ok. but we aren't going to be able to approve or deny registrations on behalf of other organisations, e.g. mur.at or QMU. & organisations may well have data privacy policies that would be breached by students' or members email addresses coming to us. is there a way that such emails could be routed to forward directly to the appropriate email address?

helenvarley commented 8 months ago

should i make this into two separate issues? one being the ability to edit the text of automated emails (i've just tested the permissions one & already want to update the text of the email i got saying my request has been sent & please wait to approve), & a separate one for the email address issue which is i guess more complex?

gloriajw commented 8 months ago

We could make the email system more robust, with distinguishable admins for each system. But I personally would still want some stripped down response to us, the email service owners, when email goes out from another system. This way, if we get 1000 of these in minutes, we can cut it off.

helenvarley commented 8 months ago

ok. shall we have a think about how it can work? i can make a separate issue for the editing of the email text.

helenvarley commented 8 months ago

i've created a separate issue, #1226, for the editing of automated email texts, & amended the subject line of this issue to reflect that it is now just about the ability to configure email addresses within the system. to be discussed! :sunglasses: