[Bug 674352] [NEW] List Moderator Login should check for username
Public bug reported: List Moderator logins currently prompt for list moderator password only. It would be good idea if prompt for username/password login as well. Mailman: 2.1.9 ** Affects: mailman Importance: Undecided Status: New -- List Moderator Login should check for username https://bugs.launchpad.net/bugs/674352 You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman.
** Description changed: List Moderator logins currently prompt for list moderator password only. - It would be good idea if prompt for username/password login as well. + It would be good idea if prompt for username/password login information + to check if the user actually has permission to login. + + The problem is when anyone who knows the list moderator password can + access and moderate the list. - Mailman: 2.1.9 + Mailman: 2.1.9 -- List Moderator Login should check for username https://bugs.launchpad.net/bugs/674352 You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman.
The problem is when anyone who knows the list moderator password can access and moderate the list.
That is the way it is designed to work. See, e.g., http://wiki.list.org/x/5YA9. Further, the owner addresses are listed in the footer of the admin and moderator login pages, so they aren't in any way secret. I have marked this as "wishlist" for possible inclusion in a future release. ** Changed in: mailman Importance: Undecided => Wishlist ** Changed in: mailman Status: New => Triaged -- List Moderator Login should check for username https://bugs.launchpad.net/bugs/674352 You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman.
In practice, every time the list of mailing list admins changes, the password needs to be reset for everybody. -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/674352 Title: List Moderator Login should check for username To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/674352/+subscriptions
participants (3)
-
Andre Klapper -
arky -
Mark Sapiro