|FROM ||Rick Moen
|SUBJECT ||Re: [Hangout-NYLXS] events
|From hangout-bounces-at-nylxs.com Wed Oct 21 02:20:56 2015
Received: from www.mrbrklyn.com (www.mrbrklyn.com [220.127.116.11])
by mrbrklyn.com (Postfix) with ESMTP id 9185D16252C;
Wed, 21 Oct 2015 02:20:54 -0400 (EDT)
Received: from linuxmafia.com (linuxmafia.COM [18.104.22.168])
by mrbrklyn.com (Postfix) with ESMTP id 19A70162527
for ; Wed, 21 Oct 2015 01:07:25 -0400 (EDT)
Received: from rick by linuxmafia.com with local (Exim 4.72)
(envelope-from ) id 1ZolcS-0008F6-VT
for hangout-at-nylxs.com; Tue, 20 Oct 2015 22:07:24 -0700
Date: Tue, 20 Oct 2015 22:07:24 -0700
From: Rick Moen
Organization: If you lived here, you'd be $HOME already.
X-Mas: Bah humbug.
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: Mutt/1.5.20 (2009-06-14)
X-SA-Exim-Scanned: No (on linuxmafia.com); SAEximRunCond expanded to false
Subject: Re: [Hangout-NYLXS] events
Reply-To: NYLXS Discussions List
List-Id: NYLXS Discussions List
Content-Type: text/plain; charset="us-ascii"
Quoting Ruben Safir (ruben-at-mrbrklyn.com):
> On 10/20/2015 08:02 PM, Rick Moen wrote:
> > 1 of 2: Thank you for making the roster
> > (http://www.nylxs.com/mailman/roster/hangout) accessible to subscribers.
> WTF... how do I get rid of that
We talked about this on the 'phone: You have the impression that the
roster is open to all Web browsers -- but it _isn't_. Mailman is
configured on this mailing list to require subscribers to provide their
subscription passwords before they're permitted to see the roster.
I'm guessing that the reason you were (I assume) permitted to see the
roster without user authentication is that you'd been visiting the
Mailman Web pages using the listadmin password, which sets a cookie that
(for some significant period of time at a stretch) permits you to see
any page in Mailman's CGI tree without further credentials -- because
you're the listadmin, and ought to be able to.
Mailman supports three default administrative configuration choices for
a mailing list's roster: 'Anyone', 'List Members', or 'List admin only'.
As listadmin, you can change those via the Privacy Options page, item
'Who can view subscription list?'
However, I believe you have misinterpreted what you see as indicating
that there is full public access to the roster -- and, as I mentioned in
the prior message, that is _not_ the case. It is set to 'List Members',
which I vaguely recall is the default -- and which I appreciate.
Listadmins who are new to GNU Mailman often go reflexively into full
control-freak mode where everything is hypercontrolled and subscribers
aren't permitted to view or do much of anything, and it's depressingly
common (in particular) to see Mailman discussion mailing lists
configured so only the listadmin is permitted to know who else is
My point upthread was to thank you for not indulging that particular
(depressingly common) variety of geek psychopathology.
hangout mailing list