Content
View differences
Updated by Jens Ulferts over 2 years ago
### Steps to reproduce
1. Login to QA Edge with a user able to share work packages
2. Go to a work package that you can share
3. Click on Share button
4. Add a non-existing user by entering their email address and click on Send invite, then click on Share and close the modal
5. As an invited user, go to your inbox and search for the invitation to view the newly shared work package
6. The email notification says that you will need to create a new account
7. Click on Open work package button in the email notification
8. As you are redirected to the login page, click on Create a new account
9. When the creation page opens, fill in all the data and try submitting
### What is the buggy behavior?
* You receive an error that the user already exists
### What is the expected behavior?
1. Change the workflow or add more information in email notifications so that users know what is expected from them. If they are told that they need to create a new account, let them do that or send them a separate email just like the one users usually receive when they are invited as members to the project (with a link to set up their password etc.)
### Screenshots
**Email received:**
<img class="op-uc-image op-uc-image_inline" src="/api/v3/attachments/80275/content">
**Error:**
**<img class="op-uc-image op-uc-image_inline" src="/api/v3/attachments/81118/content">**
**OpenProject version**
_13.1.0_
### Acceptance criteria
* When adding a user via work package sharing
* For users that have the invited status when the email is sent, the links in the mail point to the account activation but include the actual link to the work package via the back\_url parameter. A user following the link will thus first have to complete the registration but upon completion of it is redirected to the work package.
* The back\_url parameter needs to be validated so that the host is guaranteed to be the host of the openproject instance.
* If the user chooses to follow the demo tour after login (it might be that it does not start on wor package pages -> to be checked), the user is free to do so.
* If the user clicks on the link in the mail again and when being logged in, the user is transparently redirected to the work package.
* No notification is displayed stating that the account is already activated.
* If the link is expired when the user clicks on it:
* A new mail is sent to the user containing an updated link which again points to the account activation with an updated token and with the original target in the back\_url
* The browser displays a message stating the process
* **OPEN** : the current account registration mail has additional information
'Please feel free to browse our youtube channel (Youtube Link) where we provide a webinar (Webinar Link) and “Get started” videos (Get Started Videos Link) to make your first steps in OpenProject as easy as possible.
If you have any further questions, consult our documentation (Documentation Link) or contact your administrator.' Where should this be placed. It could be added to the work package share mail or an additional mail could be sent out after the successful account activation or the information is omitted altogether.
* This requires a user to be able to have multiple invitation tokens as the user might still be invited when another work package is shared with them.
* The tokens should be hashed.
* When adding a user via the administration
* The already existing email is used
* When adding a user via the project membership UI
* Instead of sending two mails, only the mail with the project information is sent out, again containing a link which includes the account activation as well as a back\_url to the intended target.
* When adding a user via the invite modal
* Instead of sending two mails, only the mail with the project information is sent out, again containing a link which includes the account activation as well as a back\_url to the intended target.
<img class="op-uc-image op-uc-image_inline" src="/api/v3/attachments/81187/content">
1. Login to QA Edge with a user able to share work packages
2. Go to a work package that you can share
3. Click on Share button
4. Add a non-existing user by entering their email address and click on Send invite, then click on Share and close the modal
5. As an invited user, go to your inbox and search for the invitation to view the newly shared work package
6. The email notification says that you will need to create a new account
7. Click on Open work package button in the email notification
8. As you are redirected to the login page, click on Create a new account
9. When the creation page opens, fill in all the data and try submitting
### What is the buggy behavior?
* You receive an error that the user already exists
### What is the expected behavior?
1. Change the workflow or add more information in email notifications so that users know what is expected from them. If they are told that they need to create a new account, let them do that or send them a separate email just like the one users usually receive when they are invited as members to the project (with a link to set up their password etc.)
### Screenshots
**Email received:**
<img class="op-uc-image op-uc-image_inline" src="/api/v3/attachments/80275/content">
**Error:**
**<img class="op-uc-image op-uc-image_inline" src="/api/v3/attachments/81118/content">**
**OpenProject version**
_13.1.0_
### Acceptance criteria
* When adding a user via work package sharing
* For users that have the invited status when the email is sent, the links in the mail point to the account activation but include the actual link to the work package via the back\_url parameter. A user following the link will thus first have to complete the registration but upon completion of it is redirected to the work package.
* The back\_url parameter needs to be validated so that the host is guaranteed to be the host of the openproject instance.
* If the user chooses to follow the demo tour after login (it might be that it does not start on wor package pages -> to be checked), the user is free to do so.
* If the user clicks on the link in the mail again and when being logged in, the user is transparently redirected to the work package.
* No notification is displayed stating that the account is already activated.
* If the link is expired when the user clicks on it:
* A new mail is sent to the user containing an updated link which again points to the account activation with an updated token and with the original target in the back\_url
* The browser displays a message stating the process
* **OPEN** : the current account registration mail has additional information
'Please feel free to browse our youtube channel (Youtube Link) where we provide a webinar (Webinar Link) and “Get started” videos (Get Started Videos Link) to make your first steps in OpenProject as easy as possible.
If you have any further questions, consult our documentation (Documentation Link) or contact your administrator.' Where should this be placed. It could be added to the work package share mail or an additional mail could be sent out after the successful account activation or the information is omitted altogether.
* This requires a user to be able to have multiple invitation tokens as the user might still be invited when another work package is shared with them.
* The tokens should be hashed.
* When adding a user via the administration
* The already existing email is used
* When adding a user via the project membership UI
* Instead of sending two mails, only the mail with the project information is sent out, again containing a link which includes the account activation as well as a back\_url to the intended target.
* When adding a user via the invite modal
* Instead of sending two mails, only the mail with the project information is sent out, again containing a link which includes the account activation as well as a back\_url to the intended target.
<img class="op-uc-image op-uc-image_inline" src="/api/v3/attachments/81187/content">