>
> >
> >[EMAIL PROTECTED] wrote:
> >>
> >> May I know why the param "cancel_anyone" is not working in dnews.conf??
> >> I set:
> >> cancel_anyone false
> >>
> >> but every user can still delete posts which is owned by others.
> >>
> >> Thanx for your kindly help.
> >
> >Hi, that setting is no longer functional, basically the checking
> >that was previously implemented was both incredibly expensive in
> >processing and ineffective.  So we removed it.
> >
> >Probably it should be implemented for local posts which may be what
> >you wanted, if so let me know and we'll add it to the todo list.
> >
> >But it's impossible to 'really' enforce that concept with cancels due to
> >the way they are defined so the best it can do is
> >prevent accidental abuse locally, which seems a bit pointless.
> >
> >If you really have a problem with rogue cancellations by local users
> >of local messages, then let us know and if you are using authentication
> >of some kind we could add a mechanism that would do what you want.
> >
> >  ChrisP.
> >
> >
>So, besides the param "cancel_anyone", is there any control on cancelling 
>msg from any other users?
>
>It is just working like a wide open area, everyone can kill msg.
>

Yes, you can add a setting
         cancel_users *@hongkong.com,*@other.domain,[EMAIL PROTECTED]

Which would only allow cancels from users within those two domains except 
bob, but again
this is only superficial protection as identities can be faked.

You can also set
         post_cancel false
if you just want to prevent local users from posting cancel messages.

My personal favorite is
         cancel_reject true
Which just disables and rejects all cancel messages which I think have much 
more negative value
than real use.

                 ChrisP.

Reply via email to