Hi,
Changed the subject to make this a separate thread, as I like some opinions.
On Fri, 7 May 2021 at 06:45, Amir Sarabadani <ladsgroup(a)gmail.com> wrote:
>
> On Thu, 6 May 2021 at 13:17, Andre Koopal <andre(a)molens.org> wrote:
>>
>>> Hi Amir,
>>>
>>> Thanks indeed for the upgrade, something I also think that was highly
>>> needed from a security perspective, so a good thing.
>>>
>>> One thing I did notice with my list being migrated is that we had some
>>> lists of non-members being able to post and also some blocked users. I
>>> don't find them back in the settings under message acceptance, but I find
>>> them in the users section under non members. I find this a bit strange.
>>> First of all you really need to go into the user itself before you see if
>>> it is a user you allow as non-member, or that it is a user marked to
>>> automatically discard. Secondly due to that when an account is created on
>>> that e-mail, you see the lists you are a non-member of. You fortunately
>>> can't see why you are a non-member, but it seems a small data-leak to me.
>>>
>>
> The non-member option in mailman3 is a bit weird. I agree. Non-member can
> also mean "accept emails from these address right away" so it's not
> negative meaning all the time but as you said, I agree.
>
It can be positive or negative indeed, But it is still strange, that you
can see that you are a non-member, in principle it is of no use, as you
can't change anything on it, and I think these are settings for the the
admins/moderators of the lists with no need for the users to see it.
>
>>> Will the old fields to filter users under settings/message acceptance
>>> still work, or will those users automatically converted to non-members? As
>>> an admin that will be difficult to manage, and it would be at least needed
>>> to be able to filter on the set action so you can see what is what. Also I
>>> don't think the interface should show you the lists you are a non-member of.
>>>
>>
> Have you tried turning them back to the setting? I haven't tried it yet
> and it might work. For the issues, you can file a bug in
> phabricator/upstream. I personally don't see it as a big deal.
>
I quickly tried to put one e-mail address in the 'Accept these non-members'
section, and it wasn't converted to a non-member so it seems the lists
there work as well. Didn't completely test if it works but I assume it
will, as otherwise there would be more complaints.
Don't mind creating phabricator tickets but I would like to hear a bit more
options, is it ok the old settings with lists with fields have been
converted to non-members, or would it have been better to just have them in
the lists in a text field only, where you have an overview. Any more
opinions?
I also would like a bit more input if others indeed think it is wrong that
you can see the lists where you are non-member off.
At least for the filter option, I already created T282325.
Regards,
André Koopal