[Mailman-Developers] Authorization System in Core

[Simon Hanna]

>Hi,
>Earlier, while discussing the permission system for manging styles, it
>was
>decided that the permissions system should be enforced in the core
>rather
>than in the postorius since otherwise it can be bypassed(deliberately
>or
>undeliberately). But one thing that I think I forgot to discuss was
>that
>currently there is no authorisation system in the core and now I am
>unable
>to figure out that how could the permissions be enforced in the core
>without an authorisation system.
>Should I workout an authorisation system for the core first or enforce
>permissions in postorius only?
Can you elaborate a little more?
What do you want to use the authorization for? Why isn't doing it in postorius safe enough?

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.