[BZ] MemberFlex 2.0.0

General Configuration​

1. What Does MemberFlex Do?
   MemberFlex provides members with self-service account-management features through their account settings, including Unsubscribe, temporarily disabling and reactivating their accounts, and requesting permanent account deletion. Administrators control feature availability, member eligibility, notifications, deletion requirements, and Help pages.
   
   
2. Can I Enable or Disable Individual MemberFlex Features?
   Yes. Unsubscribe, Disable / Reactivate Account, and Delete Account can be enabled or disabled independently through the MemberFlex options. All three features are disabled by default on installation, so they have no effect on member account-management behavior until an administrator enables them. The Member Account Settings interface is built dynamically from the enabled features and each member's eligibility, while the related Help pages are activated or deactivated according to those features and the administrator's Help-page selections.
   
   
3. Why Are Some Settings Grayed Out in the Admin Control Panel?
   Some settings depend on other options being enabled. When a related option is disabled, its dependent settings appear grayed out and are ignored. Their existing selections are preserved and take effect again when the related option is enabled.
   
   
4. Can MemberFlex Account-Management Links Be Added to the Visitor Menu?
   Yes. Administrators can independently enable visitor-menu links for Unsubscribe, Disable Account, and Delete Account.
   
   
5. Where Can I Find the MemberFlex Audit Log?
   The log is accessible in the XenForo Admin Control Panel under Logs → Users → MemberFlex Log. A shortcut is also available on the MemberFlex options page, with a reciprocal shortcut back to the settings.

Unsubscribe​

1. What Happens When a Member Uses Unsubscribe?
   MemberFlex lets members unsubscribe with a single click through their account settings. This stops nonessential emails covered by XenForo’s unsubscribe functionality while allowing necessary account, security, and transactional communications to be delivered.
   
   
2. Does Unsubscribe Stop All Emails?
   No. Unsubscribe does not block essential account-related communications, such as security, password reset, or other necessary transactional messages.
   
   
3. Doesn’t XenForo Already Allow Members to Unsubscribe Through Account Settings and Email Links?
   Yes. XenForo already provides email preferences in account settings and unsubscribe links in outgoing emails. MemberFlex complements these existing methods by placing a dedicated, single-click Unsubscribe action in the member’s account settings. Members can unsubscribe without changing each individual email preference, and MemberFlex shows their current unsubscribe status. XenForo’s existing email preferences and unsubscribe links continue to work.

Account Disabling and Reactivation​

1. What Happens When a Member Disables Their Account?
   The account is marked as self-disabled through MemberFlex and the current session ends. The account and published content are retained so the member can reactivate later.
   
   
2. Can a Disabled Member Log Back In?
   Yes, but normal account access is restricted until reactivation. After login, MemberFlex presents a mandatory dialog offering Reactivate Account or Continue As Guest.
3. Does a Disabled Account Continue Receiving Notifications?
   XenForo on-site alerts continue to be generated and retained. Routine email and push notifications are suppressed while the account is self-disabled, with permitted essential emails treated as exceptions.
4. Does MemberFlex Delete Existing Alerts When an Account Is Disabled?
   No. Existing alerts, read states, and alert preferences are preserved.
5. Can a Member Reactivate Their Account at Any Time?
   A member can reactivate a self-disabled account while the account still exists and remains eligible for reactivation. For a scheduled deletion, reactivation is available only before the deletion deadline. Once that deadline passes, reactivation is blocked, even if the scheduled deletion job has not yet completed. Reactivation is also impossible once permanent deletion is complete.

Account Deletion​

1. Does MemberFlex Support Both Immediate and Scheduled Account Deletion?
   Yes. Administrators can configure a waiting period before permanent deletion. When the waiting period is disabled, an eligible request can be processed immediately, subject to any administrator-approval requirement.
2. Can a Member Cancel a Scheduled Account Deletion?
   Yes. During the waiting period, the account remains disabled. The member can log in and reactivate it just like any other account disabled through MemberFlex. Reactivation cancels the pending scheduled deletion and fully restores the account to its active state. Once the deletion deadline has passed, reactivation is no longer available, even if the deletion job has not yet run.
3. Can Administrators Cancel a Scheduled Deletion?
   Yes. An appropriately authorized administrator can cancel a pending deletion through MemberFlex’s administrative controls. This can be particularly useful when a member cannot access their account but has changed their mind and no longer wants it deleted. Cancellation by an administrator does not itself reactivate the account.
4. Does Administrator Cancellation Automatically Reactivate the Member’s Account?
   No. Administrator cancellation prevents the scheduled permanent deletion but leaves the account disabled. Reactivation is separate.
5. What Happens to a Member’s Published Content After Account Deletion?
   MemberFlex preserves existing published threads and posts when an account is deleted. Administrators configure the available deletion options in Account Deletion Settings, including whether members can choose to retain their existing username or replace it with an anonymized username associated with that content. The published content itself is not removed.
6. Can Administrators Require Members to Provide a Deletion Reason?
   Yes. Administrators can configure whether a deletion reason is disabled, optional, or required, along with its maximum length.
7. What Security Verification Is Required Before a Member Can Delete Their Account?
   Password verification is always required before a member submits an account deletion request. Administrators can additionally require a six-digit code sent to the member's registered email address. When enabled and applicable, the code expires after 15 minutes, allows up to three incorrect attempts, and can be resent after a five-minute cooldown. Once the code is verified, the member sees a success confirmation and can continue with the account deletion form. Email verification is enabled by default but can be disabled independently of the other security options.
8. Can Members Without an Email Address Delete Their Accounts?
   Yes, if Require Email Address for Account Deletion is disabled (the default). Members without an email address use password verification alone, even when email-code verification is enabled. Administrators can enable the separate email-address requirement to block self-deletion requests from members who do not have an email address associated with their account.
9. What Happens When a Member Changes Their Email Address Before Requesting Account Deletion?
   Administrators can restrict account deletion for a configurable period of 1–30 days after a member changes their email address; the restriction is enabled by default with a seven-day waiting period. It applies to member-initiated additions, changes, and removals of an email address. MemberFlex checks only the most recent email-address change: if an administrator made that change, the restriction does not apply, regardless of any earlier member changes. A member who removes their own email address can still be restricted during the waiting period.
10. Does Registering a New Account With an Email Address Trigger the Email-Change Restriction?
    No. Providing an email address during initial registration is not treated as an email-address change. A newly registered member is not subject to the email-change waiting period unless they subsequently change their email address. Other enabled account-deletion requirements still apply.
11. Does Email Verification Apply to Both Immediate and Scheduled Account Deletion?
    Yes. When enabled and applicable, email verification is required when the member submits the deletion request, whether deletion will be immediate or scheduled. The scheduled deletion job does not require verification again when the waiting period ends.
12. Can Administrators Require Approval Before Permanent Account Deletion?
    Yes. Administrators can require approval before an account is permanently deleted. When enabled, a request requiring approval remains pending until an authorized administrator approves it, unless automatic deletion has been preapproved. This also applies after a scheduled deletion's waiting period ends.

Emails and Staff Notifications​

1. Can Administrators Configure Which MemberFlex Emails Are Sent?
   Yes. MemberFlex includes options for supported member account emails and notification events. Essential security emails, including account-deletion verification codes when enabled, are separate from these optional notifications and are sent as needed for account security.
2. Are Staff Notifications Configurable?
   Yes. Administrators can select eligible staff recipients and configure supported events and delivery channels.
3. Can I Choose Which Account Appears as the Sender of Staff Alerts?
   Yes. An eligible staff account can be selected by User ID. When configured correctly, XenForo attributes staff alerts to that account rather than the system sender.
4. Does Canceling a Scheduled Deletion Generate a Separate Audit Record?
   Yes. Member-initiated and administrator-initiated cancellations are distinguished. When cancellation occurs through member reactivation, MemberFlex also records the reactivation event.

Audit Logging​

1. Who Can View the MemberFlex Log?
   The MemberFlex Log is restricted to administrators with XenForo’s existing log-viewing administrator permission (viewLogs). MemberFlex does not introduce a separate log-viewing permission.
2. Can Administrators Search and Filter the Audit Log?
   Yes. The log supports a combined Username or User ID search field, plus filters for the performing username, action, status, and date range. A numeric user ID can locate history even after the account has been deleted.
3. How Are Deletions Performed Through MemberFlex and XenForo ACP Identified?
   Completed deletions use distinct audit actions: Account Self-Deleted for member-initiated deletion and Account Deleted By Staff for staff-initiated deletion. This makes the source of each deletion clear.
4. Does MemberFlex Log Every XenForo ACP Account Deletion?
   No. To avoid filling the audit log with routine cleanup of accounts that never completed registration, ACP deletions are logged for accounts with user states valid, email_confirm_edit, or disabled. Accounts in email_confirm, moderated, or rejected states are excluded. Prior MemberFlex activity does not override this rule.
5. Are MemberFlex Audit Records Preserved After an Account Is Deleted?
   Yes. MemberFlex keeps its audit records separately from member accounts, so historical actions and the deletion outcome remain available after an account is removed. This follows XenForo’s general approach of retaining historical records separately from the user account itself. MemberFlex preserves published posts and threads after deletion.
6. What Happens to Usernames in Historical Audit Records When an Account Is Deleted?
   If the deleted member’s username is anonymized, MemberFlex also updates the username on that member’s historical audit entries. This reduces retained identifying information while preserving the audit trail. Numeric User IDs, actions, and timestamps remain intact. If the username is retained during deletion, the historical audit username is retained as well.
7. Can Administrators Export MemberFlex Audit History?
   Yes. The Log Export feature downloads audit history as a CSV file. Administrators can choose to export all history, history within an inclusive date range, or history for a specified Username / User ID. The export includes human-readable actions, statuses, and dates alongside the available audit information.
8. Can Administrators Purge MemberFlex Log History, and Which Records Are Protected?
   Log Purge Management lets administrators remove eligible history across all dates or only entries older than a chosen date. Only Unsubscribe, Account Self-Disabled, and Account Self-Reactivated entries are eligible for purging. Deletion requests and outcomes, cancellation records, reminders, Requires Attention records, administrator-approval records, and staff actions are always protected from this purge operation.
9. What Happens to the MemberFlex Audit Log When the Add-on Is Uninstalled?
   Uninstalling MemberFlex removes the add-on's audit log and its stored history. An automatic backup is not created. If you need to retain audit information, use Log Export to download the desired records before uninstalling MemberFlex.

Help Pages, Image Uploads, and Translation​

1. Can Administrators Customize MemberFlex Help Pages?
   Yes. Administrators can configure Help-page content and optional images for the account-management features. The related Help pages are automatically activated or deactivated according to the enabled features and the administrator's Help-page selections, so the available help reflects the site's current configuration.
2. Which Image Formats Can Be Uploaded to MemberFlex Help Pages?
   JPEG, PNG, and WebP are supported. Uploads are limited to 5 MB per file and maximum dimensions of 4,000 × 4,000 pixels.
3. Does MemberFlex Use XenForo’s Attachment Restrictions or Image Processing for Help Pages?
   MemberFlex applies its own upload validation for Help-page images rather than XenForo’s general attachment restrictions. For image processing, it uses XenForo’s native functionality instead of a separate resizing or conversion engine. When XenForo image optimization is enabled, supported uploads may also be converted to WebP.
4. Is MemberFlex Fully Phrased and Ready for Translation?
   Yes. MemberFlex uses XenForo's native phrase system throughout its member-facing and administrative interfaces, including dynamically displayed account-management text. Administrators can customize or translate its wording through XenForo's phrase tools without editing source code.