Privacy concern: Don't send emails to users who have not accepted an invitation
Steps to reproduce
- Create a Team account
Invite a teammate via Email, or fromSuggested Teammates- Don't accept the invitation
- Cause some activity in a project
- Wait a week or two
Expected result
Invited member should receive one single invitation email, but no further emails.
What happens instead
Invited person retrieves a weekly team activity email with details about merge requests et al.
Same here. I was told by our team members that they are receiving mails from code-stream without even sending them the invite. Its like codestream is crawling the email addresses and trying to invite them. I had to uninstall the vscode plugin just because of this. I wish this can be removed so I start using it again
@kiriti999 - CodeStream definitely doesn't invite people automatically. All invitations are sent based on a user's explicit action. We do offer suggestions based on the commit history of the repo you have open, so it's possible someone invited you by accident because they didn't pay attention to the emails in the list of suggestions.
That said, I see you in just one CodeStream team that has two registered members and no invitees. Maybe your teammates were invited to a different CodeStream team? If you want to give me one of their email addresses I can look them up and we can delete the team if necessary. If you'd prefer not to share that here, feel free to email me at [email protected].
@planteater there was an invitation pending for a third participant in the same team, which I revoked after the user was concerned about the allegedly unsolicited email, containing readable details about merge requests. PM forthcoming.
@planteater Please test the app once. My fellow team members got an invite - not by accident and they asked me what this app was about. If it was by accident then this git issue won't be created by someone else.
@kiriti999 - Can you clarify what the issue is? I see there are two people on your team. Yourself and one other user that was invited.
I'm seeing that if you open a PR with specific reviewers, they get an email about codestream, even if they're not part of the codestream team.
@Zephirin - We don't send out any emails related to PRs. Are you sure it wasn't a Feedback Request, where the given person was added as a reviewer (which would translate into an invitation if they aren't in your CS org).
Could have been a Feedback Request, I can look into that.