On Wed, 04 Dec 2002 16:17:39 -0700, "Jason R. Mastaler"
<[EMAIL PROTECTED]> wrote:

> I'm just concerned about ignoring an IOError when a user is using
> tmda-cgi, but not in "no-su" mode.

Okay, well them I'm leaning towards the TMDA_CGI_MODE = "no-su"
solution.

> Another option is to ditch "no-su" mode because of all the problems
> it's causing. Both this, and the issue we are discussing on the
> tmda-gui list regarding confirmation URL security come to mind.
> 
> But, there may be additional problems down the road which will have to
> be accounted for because "no-su" mode is such a radical departure from
> how TMDA works and what it expects.
> 
> Reading the tmda-cgi HOWTO, you seem to already offer a global
> multi-user mode, as well as a per-user mode. I think this will cover
> practically all potential users, don't you? It's nice to be able to
> accommodate off the wall configurations, but not at the expense of
> additional frustration, upkeep, etc.

It has been a frustrating mode to add, but in retrospect it has been
far easier than I ever would have thought.  My current thinking is to
keep it a little longer.

It hasn't brought too much baggage along (well, it brought some, but
then I reverted back to the original code several times) so let's not
give up on it yet.  We can always ditch it later.

Gre7g.
_________________________________________________
tmda-workers mailing list ([EMAIL PROTECTED])
http://tmda.net/lists/listinfo/tmda-workers

Reply via email to