    it 'activates user when must_approve_users? is enabled' do
      SiteSetting.must_approve_users = true
      invite.invited_by = Fabricate(:admin)

      user = invite.redeem
      expect(user.approved?).to eq(true)
    end
The software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.