[Mailman-Users] Membership List Retrieval Issue - Permissions

[Mark Sapiro]

Brian Luria wrote:
>
>when I put the who command in, I supplied the password to no avail.
>The privacy option is restricted to list members but you're saying having
>password in subject line should allow viewing of the list..correct? If so,
>that doesn't seem to be working.


You are correct. It is a bug. The bug is already fixed (inadvertently)
by the Mailman 2.1.10 changes to show hidden members to the
admin/moderator. The following patch to Mailman/Commands/cmd_who.py
(caveat: compiled, but not tested) should fix recent versions through
2.1.9.


--- cmd_who.py  2005-08-26 18:40:17.000000000 -0700
+++ cmd_whox.py 2007-09-24 17:10:39.500000000 -0700
@@ -90,10 +90,11 @@
             usage(res)
             return STOP
         if mlist.isMember(address) and mlist.Authenticate(
-            (mm_cfg.AuthUser,
-             mm_cfg.AuthListModerator,
+            (mm_cfg.AuthUser),
+            password, address) or mlist.Authenticate(
+            (mm_cfg.AuthListModerator,
              mm_cfg.AuthListAdmin),
-            password, address):
+            password):
             # Then
             ok = 1
     else:



-- 
Mark Sapiro <msapiro at value.net>       The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan