[Bug 674352] [NEW] List Moderator Login should check for username
Public bug reported:
List Moderator logins currently prompt for list moderator password only. It would be good idea if prompt for username/password login as well.
Mailman: 2.1.9
** Affects: mailman Importance: Undecided Status: New
** Description changed:
List Moderator logins currently prompt for list moderator password only. - It would be good idea if prompt for username/password login as well. + It would be good idea if prompt for username/password login information + to check if the user actually has permission to login. + + The problem is when anyone who knows the list moderator password can + access and moderate the list.
- Mailman: 2.1.9 + Mailman: 2.1.9
The problem is when anyone who knows the list moderator password can
access and moderate the list.
That is the way it is designed to work. See, e.g., http://wiki.list.org/x/5YA9.
Further, the owner addresses are listed in the footer of the admin and moderator login pages, so they aren't in any way secret.
I have marked this as "wishlist" for possible inclusion in a future release.
** Changed in: mailman Importance: Undecided => Wishlist
** Changed in: mailman Status: New => Triaged
In practice, every time the list of mailing list admins changes, the password needs to be reset for everybody.
participants (3)
-
Andre Klapper -
arky -
Mark Sapiro