[Bug 1770464] Re: all email adress of a list are visible when a non-aproved email logs in
Mark Sapiro
mark at msapiro.net
Thu May 10 17:54:04 EDT 2018
Please verify:
The roster is not public. I.e. Privacy options... -> Subscription rules -> private_roster is not set to Anyone.
The user who attempted to subscribe was not actually subscribed.
The person doing this test did not have a saved login cookie for a list member or admin.
When I do what I think you are saying: i.e. submit the listinfo
subscribe form with an email address and password and then go back to
the listinfo page and enter the email address and password in the fields
at "Enter your address and password to visit the subscribers list: " and
"Visit Subscriber List", I get
Error
LISTNAME roster authentication failed.
Which is what I expect.
** Changed in: mailman
Status: New => Incomplete
--
You received this bug notification because you are a member of Mailman
Coders, which is subscribed to GNU Mailman.
https://bugs.launchpad.net/bugs/1770464
Title:
all email adress of a list are visible when a non-aproved email logs
in
To manage notifications about this bug go to:
https://bugs.launchpad.net/mailman/+bug/1770464/+subscriptions
More information about the Mailman-coders
mailing list