Saved search alerts - avoid spamming
Currently a user can enter any email address for alerts to be sent to. To avoid misuse, institutions should be able to configure so that a user can only choose an email address that is in their user account contact details already.
Also, if the institution does not use such a configuration, and the user inserts an email address that is NOT in their user account, then there should be an email verification process. Alerts will not be sent until the recipient clicks a message to verify they have control of that email address and willing to receive them. Assumes also that the unsubscribe link works for any recipient email address.
-
Peta Hopkins commented
See also related idea: https://ideas.exlibrisgroup.com/forums/308176-primo/suggestions/16849447-send-email-for-logged-in-users-only -- this is for the Send To action