Fix the bug with adding users

[ASC-Campaign]

Adding a user who already has an email address in CC fails with a generic error message that the email is already in use (when, in fact, it is not in use).

Management of users in CC is a pain. Please fix this so I can add whoeverm whenever, with whatever email address I want. It shouldn't matter if they have 1 CC account under that email or 100.

Love to see this bug quashed.

[ASC-Campaign]

Hello @ASC-Campaign ,

This isn't a bug, this is how the username system has to work to maintain unique logins to different accounts. The error messaging you receive is because the person you're trying to add has their email address as their username for another account they're on. They'll need to login to the other account they own / are a user on, and update their username to something different / unique. Once they've done that you can add them as a user to your account using that freed-up email address.

It'd also be advisable that once they've gotten their login setup for your account, they update their username to something more unique - that way they're free to have their email address be used to setup another account user login if necessary.

If they need further assistance with updating their other accounts' username, I'd advise having them call general support to provide the email address in question, confirm security permissions live, and work with the agent to administratively update that other username.

[William_A]

Hello @ASC-Campaign ,

This isn't a bug, this is how the username system has to work to maintain unique logins to different accounts. The error messaging you receive is because the person you're trying to add has their email address as their username for another account they're on. They'll need to login to the other account they own / are a user on, and update their username to something different / unique. Once they've done that you can add them as a user to your account using that freed-up email address.

It'd also be advisable that once they've gotten their login setup for your account, they update their username to something more unique - that way they're free to have their email address be used to setup another account user login if necessary.

If they need further assistance with updating their other accounts' username, I'd advise having them call general support to provide the email address in question, confirm security permissions live, and work with the agent to administratively update that other username.

[ASC-Campaign]

"This isn't a bug, this is how the username system has to work to maintain unique logins to different accounts. The error messaging you receive is because the person you're trying to add has their email address as their username for another account they're on."

What prevents someone from using someone else's email address as their username then, effectively blocking that person from being able to be invited? Seems like a DoS bug to me.

Also, are email addresses and user names considered separate fields? If so, then the email address field shouldn't care what the user name field is and vice versa, as they shouldn't be dependent on one another. They're separate.

If they are not separate fields then they should both always contain an email address.

This is the confusion.

[William_A]

It's not, you may not like the way it functions to ensure unique logins for different levels of account accessibility, but it is functioning as designed. Even in the very rare (if ever occurring) scenario of what you're describing, it would be a simple enough for that new user to call us for live security protocol confirmations, and have it addressed by our support team. This would be no different than if their email address were entered to make a new account with the majority of account creation sequences across the web. 

Accounts cannot send from an address until that address is actually verified on the account. New users to an account must use the links in the new user confirmation email to setup the password they'll be using for login as an Account Manager or Campaign Creator. In either of these scenarios, your new user's email address isn't being used in a way they can't control for our system, unless their entire email address is compromised - in which case that is wholly external issue that they'd need to address. 

[William_A]

When you setup a new user, you can only include the email address, that has to be used as their username for your account to start. For security purposes we no longer allow owners to manually setup the login info (including unique usernames) for their users.