The Account Entry Block now respects the 'Disable Duplicate Checking' setting under Security Settings. This setting controls whether Rock attempts to match a new account with an existing person record based on the information provided when entering a new account. If 'Disable Duplicate Checking' is enabled for a person's Protection Profile Level, Rock will allow a new account to be created, even if an identical record already exists.
For example, if someone tries to create an account using an email address and name that match an existing record, Rock typically prevents duplication by linking the new login to the existing account. However, if that person's Protection Profile Level has duplicate checking disabled, Rock will not attempt to match the records, and a new account will be created instead. This is an important consideration for preventing account hijacking attempts on sensitive accounts. It also means that extra diligence is needed when merging duplicate accounts to ensure that all linked logins belong to the correct individual.
Also Note:
By default, the 'Disable Duplicate Checking' setting is not enabled for the 'Medium' protection level. You can control this setting under Security Settings.
