alain williams writes:

 > I host several mail lists, some of which I do not manage - my
 > 'clients' do that and, with a bit of hand holding have learned to
 > add/remove/... people to lists via the web interface. They do not
 > know what the mailman shell is - and I would not want to give them
 > shell access to the machine.
 > 
 > So: it would be really useful if the list manager were able to do
 > this via the web interface.

I would oppose this.  User email addresses have to be mutable by the
user, but the list manager's interest in them is very limited.  The
potential for screwing up other lists is large.  You are requesting
this because the users don't know what they're doing.  In that case
they may be displeased with the result, which will require other list
managers to fix problems you've created.  On the other hand we could
restrict the effect to the particular subscription, but that would
entail other issues.

I'm pretty sure allowing list administrators to manipulate user
addresses would be a vector for social engineering to take over an
account, as well.  Not that taking over a Mailman account is
particularly valuable to hackers, but I've seen people do similar
things purely out of malice.

I would support a merge request allow exporting and importing a user's
option configuration via a file in a JSON or TOML format (ie, no PII).


-- 
GNU Mailman consultant (installation, migration, customization)
Sirius Open Source    https://www.siriusopensource.com/
Software systems consulting in Europe, North America, and Japan
_______________________________________________
Mailman-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://lists.mailman3.org/mailman3/lists/mailman-users.mailman3.org/
Archived at: 
https://lists.mailman3.org/archives/list/[email protected]/message/7C32T4INMA7VCJYDJXYVJMMEW636OYPL/

This message sent to [email protected]

Reply via email to