openedx / openedx/openedx-platform
Non active users can enroll in courses
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 8.2k
- Forks
- 4.4k
- Avg merge
- 6d 18h
- Merged PRs (30d)
- 42
Description
As per the documentation, users should activate their account by following the emailed instructions before they can enroll in a course. However it's not what actually happens and inactive users can enroll in any course the first time they access after registration.
Steps to reproduce:
- Go to the Open edX sandbox
- Register a new account
- Do not logout
- Do not click the link in the email to confirm you account
- Verify that learner dashboard shows a message like "Remember to confirm your email so that you can keep learning!" Do NOT click on the link to confirm now.
- Go to the course catalog, open the course about page and enroll in any open course.
- Browse, take exams, etc.
Expected behavior:
Students should not be allowed to enroll in any course before activating their accounts.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the enrollment requirements documentation and reproduce the behavior in the Open edX sandbox using the listed registration and enrollment steps. Trace the enrollment eligibility flow for an account that has not confirmed its email; done means inactive users are prevented from enrolling in courses while activated users retain normal enrollment access.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- authentication, authorization
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100