Invitations and sign-up approval
Let somebody in by name, or require every sign-up to go through you.
A personal invitation
The “Users” screen has “Invite”. Type an e-mail address, pick a role — user or admin — and pick how long the link stays valid: a day, a week, two weeks or a month.
Whoever opens the link gets approved access in the role you set, and completes the sign-up on the site itself.
We do not send the link by e-mail — you copy it and send it. It is shown once only, because all we keep is a hash of it. If it closed before you copied it, create a new one.
Sign-up approval
A switch on the “Users” screen decides whether every new sign-up waits for your approval. While it is on, somebody who signs up does not get in until you approve them — and anybody already registered carries on as usual.
The people waiting sit in the “Pending requests” tab, with a count beside it. A refusal is remembered rather than erased, so the same person does not reappear in the queue every morning.