Allow org admins to control auto-join settings #511
Description
Goals
Auto-join provides a powerful mechanism for org admins to streamline joining for their members and improves the onboarding experience for new MuckRock users. Right now, this feature is not well exposed to org admins or MuckRock staff, so we’d like to surface it better.
Design
Security section
From the security section of #532, we’ll provide an option for org admins to enable auto-join:
This will have two states: enabled and disabled.
- When clicking Enable auto-join, we’ll submit a POST to that turns on auto-join for this org and redirects to a page for managing domains.
- When clicking Manage domains, we’ll open a page for managing domains.
- When clicking Disable auto-join, we’ll submit a POST request that disables auto-join for this org and reloads the page.
Domain management
We’ll add a new page for users to manage their authorized auto-join domains. The only domains an admin can add will be based on their existing, confirmed email addresses. Common domains—gmail, hotmail, yahoo, etc.—will not be options for supporting auto-join.
This page will need two POST action handlers for adding and removing a domain from the org’s auto-join settings.