display members moderator flag

Hello,
We're using Mailman v2.1.12 on Centos 6.7, and we just went production with it last Sunday, July 31.
Other than browsing through the membership listing in the GUI and looking for unchecked mod settings, to identify who may post unmoderated, is there a script that would display this type of information?
I've searched through archives and did a fair share of google searches, but not finding anything specific to this. Perhaps a feature request to make the membership listing sort capable some day would satisfy my needs.
Thanks in advance for any recommendations or suggestions.
~Ed
Ed Beu , Systems Programmer Enterprise Technology Services Department of Administration Anchorage, AK 99501-1677
" http://www.doa.alaska.gov/ets/

On 08/03/2016 10:46 AM, Beu, Ed (DOA) wrote:
Other than browsing through the membership listing in the GUI and looking for unchecked mod settings, to identify who may post unmoderated, is there a script that would display this type of information?
Beginning with Mailman 2.1.21, Mailman's bin/list_members script has options to list just the moderated or unmoderated members.
There is also a withlist script at <https://www.msapiro.net/scripts/list_mod.py> (mirrored at <https://fog.ccsf.edu/~msapiro/scripts/list_mod.py>) that can do this.
I've searched through archives and did a fair share of google searches, but not finding anything specific to this. Perhaps a feature request to make the membership listing sort capable some day would satisfy my needs.
There is also a script at <https://www.msapiro.net/scripts/mailman-subscribers.py> (mirror <https://fog.ccsf.edu/~msapiro/scripts/mailman-subscribers.py>) that can run on your work station and screen scrape the admin Membership List and write a CSV which can be imported to a spreadsheet ans searched/sorted as you like.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

Thank you Mark for all the different options, very useful!
I have another question, which may require a new thread, but here goes.
We have chosen to not give our list managers "Administrative" access to their lists. We feel there are too many options that could be changed that could be detrimental to a list. Therefore we're only giving them the Moderator password so that they can use the 'who' command to obtain membership reports on their own.
Some of these 'list admins' are used to being able to 'unsubscribe' members without the member having to confirm via the email confirmation. Our old system would unsubscribe the member and send a notice that they were removed from the list.
Other than relying on the bounce mechanism or by knowing the members password to remove them, is there any way for a list moderator to accomplish this task? Perhaps access to the 'Membership List' only?
Thanks in advance for your assistance!
~Ed
Ed Beu, System Programmer Dept. of Administration, ETS (907)269-6790 ed.beu@alaska.gov
-----Original Message----- From: Mailman-Users [mailto:mailman-users-bounces+ed.beu=alaska.gov@python.org] On Behalf Of Mark Sapiro Sent: Wednesday, August 03, 2016 4:24 PM To: mailman-users@python.org Subject: Re: [Mailman-Users] display members moderator flag
On 08/03/2016 10:46 AM, Beu, Ed (DOA) wrote:
Other than browsing through the membership listing in the GUI and looking for unchecked mod settings, to identify who may post unmoderated, is there a script that would display this type of information?
Beginning with Mailman 2.1.21, Mailman's bin/list_members script has options to list just the moderated or unmoderated members.
There is also a withlist script at <https://www.msapiro.net/scripts/list_mod.py> (mirrored at <https://fog.ccsf.edu/~msapiro/scripts/list_mod.py>) that can do this.
I've searched through archives and did a fair share of google searches, but not finding anything specific to this. Perhaps a feature request to make the membership listing sort capable some day would satisfy my needs.
There is also a script at <https://www.msapiro.net/scripts/mailman-subscribers.py> (mirror <https://fog.ccsf.edu/~msapiro/scripts/mailman-subscribers.py>) that can run on your work station and screen scrape the admin Membership List and write a CSV which can be imported to a spreadsheet ans searched/sorted as you like.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

On 08/04/2016 09:39 AM, Beu, Ed (DOA) wrote:
Some of these 'list admins' are used to being able to 'unsubscribe' members without the member having to confirm via the email confirmation. Our old system would unsubscribe the member and send a notice that they were removed from the list.
Other than relying on the bounce mechanism or by knowing the members password to remove them, is there any way for a list moderator to accomplish this task? Perhaps access to the 'Membership List' only?
The list moderator password only allows access to the admindb web UI. Allowing access to selected admin UI functions with that password would require non-trivial source changes.
If you are willing to create your own web page with it's own authentication, see <https://wiki.list.org/x/4030648> and the members.c program linked therefrom for a way to execute Mailman command scripts, e.g. bin/remove_members, from a web application.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

Hi Mark,
We've discovered that if the Unsubscribe_Policy is set to Yes (1), the moderator can unsubscribe members without the members input! The member simply gets a notice that they've been unsubscribed.
~Ed
Ed Beu, System Programmer Dept. of Administration, ETS (907)269-6790 ed.beu@alaska.gov
-----Original Message----- From: Mark Sapiro [mailto:mark@msapiro.net] Sent: Thursday, August 04, 2016 10:45 AM To: Beu, Ed (DOA) <ed.beu@alaska.gov>; mailman-users@python.org Subject: Re: [Mailman-Users] display members moderator flag
On 08/04/2016 09:39 AM, Beu, Ed (DOA) wrote:
Some of these 'list admins' are used to being able to 'unsubscribe' members without the member having to confirm via the email confirmation. Our old system would unsubscribe the member and send a notice that they were removed from the list.
Other than relying on the bounce mechanism or by knowing the members password to remove them, is there any way for a list moderator to accomplish this task? Perhaps access to the 'Membership List' only?
The list moderator password only allows access to the admindb web UI. Allowing access to selected admin UI functions with that password would require non-trivial source changes.
If you are willing to create your own web page with it's own authentication, see <https://wiki.list.org/x/4030648> and the members.c program linked therefrom for a way to execute Mailman command scripts, e.g. bin/remove_members, from a web application.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

Beu, Ed (DOA) writes:
We've discovered that if the Unsubscribe_Policy is set to Yes (1), the moderator can unsubscribe members without the members input! The member simply gets a notice that they've been unsubscribed.
But that means that *anybody* can unsubscribe a member, since only moderation is enabled by the moderation password, not other list management features such as subscription management. So there is apparently no authorization or authentication required to unsubscribe someone.
That may be OK in your environment if nobody knows about it (it's too much to expect that in a large organization there's neither malice nor mischief about!), but you may need to change policy if you get a spate of unexpected unsubscriptions. You also should avoid "one click" unsubscription footers.
-- Associate Professor Department of Policy and Planning Science http://turnbull/sk.tsukuba.ac.jp/ Faculty of Systems and Information Email: turnbull@sk.tsukuba.ac.jp University of Tsukuba Tel: 029-853-5175 Tennodai 1-1-1, Tsukuba 305-8573 JAPAN

On 08/04/2016 08:06 PM, Stephen J. Turnbull wrote:
Beu, Ed (DOA) writes:
We've discovered that if the Unsubscribe_Policy is set to Yes (1), the moderator can unsubscribe members without the members input! The member simply gets a notice that they've been unsubscribed.
But that means that *anybody* can unsubscribe a member, since only moderation is enabled by the moderation password, not other list management features such as subscription management. So there is apparently no authorization or authentication required to unsubscribe someone.
No. It means anyone can request unsubscription of anyone, but the unsubscription requires moderator approval. Presumably the moderator won't approve it if she didn't initiate it.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

Mark Sapiro wrote:
On 08/04/2016 08:06 PM, Stephen J. Turnbull wrote:
Beu, Ed (DOA) writes:
We've discovered that if the Unsubscribe_Policy is set to Yes (1), the moderator can unsubscribe members without the members input! The member simply gets a notice that they've been unsubscribed.
But that means that *anybody* can unsubscribe a member, since only moderation is enabled by the moderation password, not other list management features such as subscription management. So there is apparently no authorization or authentication required to unsubscribe someone.
No. It means anyone can request unsubscription of anyone, but the unsubscription requires moderator approval. Presumably the moderator won't approve it if she didn't initiate it.
However, I realize there is a problem in that all unsubscribes, even those initiated by a user with a password, require moderator approval so if a moderator sees an unsubscription request that she didn't initiate, she has no way to know if this was intentionally initiated by the user or inadvertently or maliciously by someone else.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
participants (3)
-
Beu, Ed (DOA)
-
Mark Sapiro
-
Stephen J. Turnbull