Friend TP Glitch?

My realm is set to members only, and I have limited permissions on who is allowed. However, when one of the members was online, one of their friends TP'd to them and they managed to get into my realm despite not being a member? It was really weird and I feel like that needs to be checked.