Hi

We are facing some issues in archiving the lists. Even though the list is 
enabled to be private archive it is advertised to each and every one 
irrespective of their role or anything. This will be a big data breach if it 
goes the same way into the production.

We tried and figured out and blocked access to outside persons to view 
archives. Only the list administrator and moderator can see their archives 
after logging in. They can't even See the archives of other lists.

Till here everything was smooth. But when I enter https://hostname/hyperkitty 
after logging in,it displays all the list archives irrespective of public and 
private to the person who has logged in. We also observed database is not 
updating when we change the private or public archive settings from postorius 
page. 

Any heads up would be appreciated

Regards
Sandeep
_______________________________________________
Mailman-Developers mailing list -- mailman-developers@python.org
To unsubscribe send an email to mailman-developers-le...@python.org
https://mail.python.org/mailman3/lists/mailman-developers.python.org/
Mailman FAQ: https://wiki.list.org/x/AgA3

Security Policy: https://wiki.list.org/x/QIA9

Reply via email to