Rob Unsworth wrote:
On Sat, 9 Sep 2006, CPHennessy wrote:
Hi all,
I'm trying to cleanup members on this list to help reduce spammers using
uploading files to their home directories. As part of this, I'm considering
removing all users who do not have the "Author" role. Does this seem
reasonable ?
Totally unreasonable, you are punishing the innocent in the hope you will
punish the guilty.
Why would non authors have a home directory? and why would they have
upload permissions?
If your stated reason is valid the most likley culprit has an authors
role.
Until this latest episode of spamming, I was under the impression
that people did not have "home directories" unless they had the
Author role. This assumption has been proven to be incorrect,
because the one username I personally checked did not have that
role, only the Member role.
There is no real need for someone to have a Member role at
OOoAuthors to be able to participate in this mailing list,
although you do need it to log in and see, for example, the
Review List.
If we can do it using Plone, I think a better solution is to
restrict "home directories" to those with the Author role.
--Jean
