Lovable: Approve Requests to Use Your Internally Published App
LovablePeople outside the audience of a published app can now request access, and approvers can grant it from the Inbox. Approving adds the person to the app's audience without republishing, and a visitor waiting on the page gets in within seconds. The approved person does not get project access or join the workspace.
Key Takeaways
- People outside an app's audience can now request access from the "You don't have access" screen.
- Requests land in the Inbox, and owners, editors and above, and publishing-capable admins can approve or decline.
- Approval adds the person to the audience without republishing, and a waiting visitor gets in within seconds.
- Approved people get no project access and do not join the workspace.
- Outsiders must verify their email before the request is accepted, while workspace and organization members skip this.
- On Business and Enterprise plans, the External viewer invites setting can limit requests to specific domains or turn them off.
Requesting Access to a Published App
Lovable now lets people who are outside a published app's audience ask for access. A person who opens the app and is not in its audience logs in to Lovable and sees a "You don't have access" message. They select Request access, optionally add a message, and send it. People who are in neither the builder's workspace nor its organization must verify their email address before the request is accepted. Workspace members and colleagues in other workspaces of the same organization skip that step.
This is separate from project access requests, which are about working on the project itself.
Who Receives and Decides
Requests appear in the Inbox, opened from the user menu under the avatar. Each one shows the requester's name, email address, the app they want and any message. They go to the project's owner, project editors and above, and workspace admins and owners who can publish that project. Email goes to the project owner, or to workspace admins and owners. Everyone else sees the request only in the Inbox. Approvers choose Approve or Decline, and the requester gets an email either way.
What Approval Does
Approval adds the person to the app's audience immediately, so the app does not need to be republished. A visitor still waiting on the page gets in within a few seconds without reloading. The approved person gets no access to the project and does not join the workspace. If the app was published to the whole workspace, the first approval changes the audience to Custom, which still includes the whole workspace, so existing viewers keep access.
Controls and Edge Cases
On Business and Enterprise plans, the workspace's External viewer invites setting controls outside requests. When it is Off, nobody outside the workspace can request access, and when it is set to specific email domains, only those domains can. There is no setting to block requests for a single app. If an app is unpublished while a request is pending, approval is refused and the request stays open until the app is republished. On Enterprise plans, a workspace policy that blocks publishing also blocks approvals, though declining is still allowed. A declined person can request again after 24 hours, and someone whose access was removed can ask again immediately.