As per the documentation, users should activate their account by following the emailed instructions before they can enroll in a course. However it's not what actually happens and inactive users can enroll in any course the first time they access after registration.
Steps to reproduce:
- Go to the Open edX sandbox
- Register a new account
- Do not logout
- Do not click the link in the email to confirm you account
- Verify that learner dashboard shows a message like "Remember to confirm your email so that you can keep learning!" Do NOT click on the link to confirm now.
- Go to the course catalog, open the course about page and enroll in any open course.
- Browse, take exams, etc.
Expected behavior:
Students should not be allowed to enroll in any course before activating their accounts.
As per the documentation, users should activate their account by following the emailed instructions before they can enroll in a course. However it's not what actually happens and inactive users can enroll in any course the first time they access after registration.
Steps to reproduce:
Expected behavior:
Students should not be allowed to enroll in any course before activating their accounts.