Buddypress and buddyboss use the same engine
When the user activates his code, he has the possibility to access his profile (with the error message) but also the blog menu, site activities, groups etc …
It should be possible to block the user’s ability to activate his account by himself (by the activation code). So I could activate in the back office and then approve.
