Originally Posted by omegatron
If the username and password they use is correct and exists they will be logged in and then assigned the proper permissions based on the usergroup they are in.
This is exactly what leads to the confusion. A non-confirmed mail address is a not valid account. Fullstop. There does not exist in real life a 50% valid account. Either it is valid or not. This is a YES or NO option but never a MAYBE option.
If the webmaster decides to allow only new user registrations with verification e-mails, the intention is pretty clear. NO ACCESS TO ANYTHING until they confirmed their mail address, since this user is officially not yet validated.
A not yet valid account, must not be able to login or belong to a usergroup. It does not matter whether vbulletin or others make the same mistake.
As a side note:
I would strongly suggest, not to rely only on the way vbuletin works when making new features. I know vbulletin users is the big part of your costumers. But you will never reach a siginificant part of other users, if you only focus on vbulletin like usability or features for vbulletin users.
There are more potential costumers out there who do not use vbulletin than those who use it. You are missing to address them by depending too much on how vbulletin works.
So please change this login problem in the next upgrade.