[ mailman-Feature Requests-1269067 ] e-mail command confirmations should be optional

SourceForge.net noreply at sourceforge.net
Sun Sep 9 00:43:58 CEST 2007


Feature Requests item #1269067, was opened at 2005-08-24 13:09
Message generated for change (Comment added) made by msapiro
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=350103&aid=1269067&group_id=103

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Daniel (doolyo)
Assigned to: Nobody/Anonymous (nobody)
Summary: e-mail command confirmations should be optional

Initial Comment:
When we send an e-mail to change the member's 
options with a command (e.g. to subscribe/unsubscribe 
members), the confirmation of the commands should be 
optionnal.

This is useful particularly if we do a php script that 
sends the commands automatically from a post field. 
Then the member doesn't need to see all those e-mail 
commands.

This should be an optional command that would disable 
these confirmations for the whole list and all commands.

www.Sympa.org mailing list does this very well.

Thank you.
Daniel

----------------------------------------------------------------------

>Comment By: Mark Sapiro (msapiro)
Date: 2007-09-08 15:43

Message:
Logged In: YES 
user_id=1123998
Originator: NO

Users should not be able to change their subscription address without
confirmation unless the site has chosen to allow open subscribes and the
list is so configured. Otherwise, anyone can maliciously subscribe anyone
else by first subscribing themselves, confirming and then changing their
address to the target.

What you (nes49) want is for an admin to be able to change a user's
address without the user's confirmation. I agree with your reasoning, but
that is not what this request is about. My 2005-11-03 comment was about
user's subscribing without confirmation, but as I read this request today,
I think it merely asks that the user be able to supress the "results of
your email commands" informational email.

----------------------------------------------------------------------

Comment By: NancyS (nes49)
Date: 2007-09-08 10:59

Message:
Logged In: YES 
user_id=995718
Originator: NO

Yes, please. If the admin can subscribe an address without a confirmation,
then they should also be able to change the address. Forcing kludges like
unsubscribe the old address and subscribe a new one risks losing the
changes that a subscriber may have made. [Yes, if they made changes, they
should be expected to respond to the confirmation, but there's no way to
tell if they are one of the subscribers that understands the web interface
or not.]

----------------------------------------------------------------------

Comment By: Daniel (doolyo)
Date: 2005-11-09 01:51

Message:
Logged In: YES 
user_id=1320890

Ok, thank you for that information, it works now.
I understand your concern, and allowing free subscriptions 
from only certain hosts would be an idea of new feature 
request. It's my case where it's always the server that send 
an e-mail to mailman to subscribe people. It is a bit more 
difficult for people to use my script by spoofing it, and I can 
prevent more than 3 e-mails per day per IP address if really 
needed.


----------------------------------------------------------------------

Comment By: Mark Sapiro (msapiro)
Date: 2005-11-08 17:28

Message:
Logged In: YES 
user_id=1123998

I'm moving this to "Feature Requests" as it is not a bug.

----------------------------------------------------------------------

Comment By: Mark Sapiro (msapiro)
Date: 2005-11-03 17:24

Message:
Logged In: YES 
user_id=1123998

In general, I think this is a bad idea because it allows
anyone to subscribe anyone else to a list by spoofing their
email address in an email command.

If you really want to open up subscribing without
confirmation, that feature is already available. Put

 ALLOW_OPEN_SUBSCRIBE = Yes

in mm_cfg.py and lists will have a None option for
subscribe_policy which will allow subscribe without
confirmation.

----------------------------------------------------------------------

Comment By: moshe weitzman (weitzman)
Date: 2005-11-03 06:05

Message:
Logged In: YES 
user_id=199362

I too need this. Thanks.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=350103&aid=1269067&group_id=103


More information about the Mailman-coders mailing list