Protect seeing the list of mailing lists, using htaccess, or similar?
Hi - I want to hide our list of mailing lists from the public, but still make the list viewable to administrators. Is this possible, i.e. through an htaccess file, or perhaps some other method? Thanks.
Mark London
On 01/07/2014 01:51 PM, Mark London wrote:
Hi - I want to hide our list of mailing lists from the public, but still make the list viewable to administrators. Is this possible, i.e. through an htaccess file, or perhaps some other method? Thanks.
If you mean that you want the listinfo overview at, e.g., http://example.com/mailman/listinfo/ to show no lists, but the admin overview at , e.g., http://example.com/mailman/admin/ to show the lists, this is not possible in Mailman without code modification, but even if you could do it, you would also need to implement some kind of authentication to prevent non-admins from seeing the http://example.com/mailman/admin/ page.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
On 1/7/2014 at 22:51, Mark London <mrl@psfc.mit.edu> wrote: Hi - I want to hide our list of mailing lists from the public, but still make the list viewable to administrators. Is this possible, i.e. through an htaccess file, or perhaps some other method? Thanks.
You could run a cronjob that generates an html page with the appropriate links, e.g. <a href=$mailmanbaseurl/listinfo/$listname>$listname</a> and store the file on the private archive directory of a special list where only the list admins have access to. If an administrator enters the url $mailmanbaseurl/mailman/private/$speciallist/$infopage he or she can access the info page with all lists.
This method is rather crude, but requires no change of mailman code. Access control is via mailman's mechanism.
On Thu, Jan 09, 2014 at 04:27:57PM +0100, Peter Heitzer wrote:
On 1/7/2014 at 22:51, Mark London <mrl@psfc.mit.edu> wrote: Hi - I want to hide our list of mailing lists from the public, but still make the list viewable to administrators. Is this possible, i.e. through an htaccess file, or perhaps some other method? Thanks.
You could run a cronjob that generates an html page with the appropriate links, e.g. <a href=$mailmanbaseurl/listinfo/$listname>$listname</a> and store the file on the private archive directory of a special list where only the list admins have access to. If an administrator enters the url $mailmanbaseurl/mailman/private/$speciallist/$infopage he or she can access the info page with all lists.
This method is rather crude, but requires no change of mailman code. Access control is via mailman's mechanism.
Ugh. In Apache, you can use Auth in a <Location> stanza:
http://httpd.apache.org/docs/2.2/mod/mod_auth_basic.htmlI've not tried it with a LocationMatch regexp, but ^/mailman/... might work too.
-- "I try not to get drunk at lunchtime any earlier in the week than Thursday." -- Giles Coren
participants (4)
-
Adam McGreggor -
Mark London -
Mark Sapiro -
Peter Heitzer