I enabled email support integration with the module.

The problem is, when a user without proper role permission sends an email, the module creates a node for it.

Is there any reason for current behavior? Or is it a bug?

Comments

burkeker’s picture

burkeker commented

I don't think it's a bug. To use this module as the front end to users, there would be first time users that haven't have accounts on the system, therefore no authenticated roles are assigned to them.
Then it's about spam protection.

Hendry Lee’s picture

Hendry Lee commented

That's the whole point. I don't want anyone without an account to send an email. I guess that is why the perms are for. And yes, spam is a real problem with such a setup. If only the role permission works. Haven't tested it on 7.x though. I'm migrating my site to 7.x this week. We'll see how it goes.

jeremy’s picture

jeremy commented
Category: bug » support
Status: Active » Fixed

There's two ways you can deal with this:

1. On the Support module's settings page, uncheck the "Auto-create new users on incoming mail" option. It explains, "Check this box if you would like the support module to automatically create new user accounts when emails are received from unknown email addresses. If you uncheck this box and have "Integrate inbound email" enabled for one or more of your clients, notification emails will be sent when emails are discarded notifying the sender that they have to register to be able to create or update support tickets via mail. This option can also be set on a per-client basis."

2. If you know the email domains from which emails will be coming from, you can add global domain filters in the "Globally allowed domains" section on the Support module's settings page, or on a per-client basis on the client configuration page.

Be sure you're running the latest release.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.