Anonymous player can use the direct challenge link even if the creator's preference is set to registered only

[yafred]

pulled from forum: https://lichess.org/forum/lichess-feedback/direct-challenge-casual-links-that-anon-players-cannot-join

Exact URL of where the bug happened

Any link created using 'Play with a friend'

Steps to reproduce the bug

User A set privacy preferences to 'let other players challenge you: if registered'
User A create a link using 'Play with a friend'

What did you expect to happen?

Only registered users should be allowed to join the game

What happened instead?

anonymous players can too

Operating system

Windows 11

Browser and version (or alternate access method)

Firefox

Additional information

No response

[yafred]

May be all the privacy rules should apply

[SergioGlorias]

opinion: I think it shouldn't be touched, since normally the person receiving the link is known and not a complete stranger

The option only has the effect of the person receiving the challenge directly on their profile.