[Feature request] Request access feature

[ecolab-neil]

Is your feature request related to a problem? Please describe.
It is a bit frustrating when you have to wonder how to distribute an invitation and which email address/method someone wants to use.

Describe the solution you'd like
Please consider allowing a "request access" message/featuree instead of "you don't have access so that if someoen clicks on onepub.dev/{orgid}/someonelsespackage and taps "Request access" then it notifies the admin/package owner that they requested access or something similar

[bsutton]

This feels a little problematic as it opens you up to phishing attacks. A hacker triggers a request using an email address that looks familiar so you click 'allow' without paying enough attention and you have just let a hacker in. The current method makes you think about what you are doing and you are the one entering the email address. There is also the issue as to how the users know what organisation they want to join as we can't expose this information to a non-user. I guess they could enter an email address on the assumption that they know you are the admin - but then with OnePub you can belong to multiple organisations, so some clarity needs to be had as to which one they want to join. We've had a discussion internally and we are struggling to see how this is an improvement over the existing process.

It is a bit frustrating when you have to wonder how to distribute an

invitation I think once you have done this once that problem goes away.

which email address/method someone wants to use.

As noted above this is a problem in either direction. For the vast majority of our enterprise customers the email is always a corporate email address.

…

On Sat, Sep 27, 2025 at 4:25 AM ecolab-neil ***@***.***> wrote: *ecolab-neil* created an issue (onepub-dev/onepub#562) <#562> *Is your feature request related to a problem? Please describe.* It is a bit frustrating when you have to wonder how to distribute an invitation and which email address/method someone wants to use. *Describe the solution you'd like* Please consider allowing a "request access" message/featuree instead of "you don't have access so that if someoen clicks on onepub.dev/{orgid}/someoenelsespackage <http://onepub.dev/%7Borgid%7D/someoenelsespackage> and taps "Request access"then it notifes the admin/package owner that they requested access or something similar — Reply to this email directly, view it on GitHub <#562>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAG32OCXVWC3LLWSBZPIO4T3UWAI3AVCNFSM6AAAAACHTT23P6VHI2DSMVQWIX3LMV43ASLTON2WKOZTGQ2TQNRYGE3DKMQ> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>