[Mailman-Users] Restricting access to the pipermail archives

[Billy Crook]

It is not clear to me that archive_private controls access to the archive.

My understanding is that archive_private is used to inform mailman that the
email addresses visible in the archive should be presented differently
depending if the archive will be made publicly accessible or not.  i.e.
munge the email addresses if there's a chance spambots can find them.

I would like to NOT munge the addresses, so they are useful to click on for
my users.  But I want all of the text of each archived message to be kept
in secret on the server, viewable only by members of the list.

I only really have one list given the kind of organization this is for. (a
neighborhood of about 35 homeowners)  My reason for offering mailman to
them in the first place is so I don't have to see a big list of email
addresses every time we send or receive something, and so that the list can
be kept in a central place (on the HOA web server).

I want all members and no non-members to be able to see who else is on the
list (that part already works), and for all members and no non-members to
be able to browse the archives.

To that end Adam's original suggestion of iterating over list_members seems
plausible.  I would hope there was a more "supported" way to do this, like
having a setting in postfix that causes it to create and maintain htaccess
files in each list's private directory.  But I am up to the challenge of
writing it myself.  I already made minor sourcecode modification to my
install to tweak how the names in from addresses are calculated.

On Thu, Aug 20, 2015 at 11:15 AM, Adam McGreggor <adam-mailman at amyl.org.uk>
wrote:

> On Thu, Aug 20, 2015 at 09:08:43AM -0700, Mark Sapiro wrote:
> > On 08/19/2015 11:43 PM, Billy Crook wrote:
> > > I want to give my users archives, but require authentication to access
> the
> > > archives.  They should not be accessible to non-members.
> > >
> > > How can I tie mailman's existing authentication (which can for example
> > > conceal the member list from non-members), into pipermail?
> >
> >
> > On the web admin Archiving Options page for the list, set
> > archive_private to 'private'.
>
> Which is (much) simpler than the way I suggested, thinking you were
> after something for all list members, regardless of which list.
>
>
> --
> "If more of us valued food and cheer and song above hoarded gold, it
>  would be a merrier world"
>     -- J. R. R. Tolkien
> ------------------------------------------------------
> Mailman-Users mailing list Mailman-Users at python.org
> https://mail.python.org/mailman/listinfo/mailman-users
> Mailman FAQ: http://wiki.list.org/x/AgA3
> Security Policy: http://wiki.list.org/x/QIA9
> Searchable Archives:
> http://www.mail-archive.com/mailman-users%40python.org/
> Unsubscribe:
> https://mail.python.org/mailman/options/mailman-users/billycrook%40gmail.com
>