[Bug 1770464] Re: all email adress of a list are visible when a non-aproved email logs in

Mark Sapiro mark at msapiro.net
Thu May 10 17:54:04 EDT 2018


Please verify:

The roster is not public. I.e. Privacy options... -> Subscription rules -> private_roster is not set to Anyone.
The user who attempted to subscribe was not actually subscribed.
The person doing this test did not have a saved login cookie for a list member or admin.

When I do what I think you are saying: i.e. submit the listinfo
subscribe form with an email address and password and then go back to
the listinfo page and enter the email address and password in the fields
at "Enter your address and password to visit the subscribers list: " and
"Visit Subscriber List", I get

Error
LISTNAME roster authentication failed.

Which is what I expect.

** Changed in: mailman
       Status: New => Incomplete

-- 
You received this bug notification because you are a member of Mailman
Coders, which is subscribed to GNU Mailman.
https://bugs.launchpad.net/bugs/1770464

Title:
  all email adress of a list are visible when a non-aproved email logs
  in

To manage notifications about this bug go to:
https://bugs.launchpad.net/mailman/+bug/1770464/+subscriptions


More information about the Mailman-coders mailing list