The mailing list for listmasters using Sympa

[Olivier Salaun - CRU <address@concealed>]

> How do you solve such problem:
> everybody can unsubscribe someone from some lists if knows her(his) email
> address and list. How to stop or prevent this. 

The aim of this command is to allow unsubscription of old addresses.

What prevents Mr A from unsubscribing Mr B from list C is that
Sympa will ask Mr B to confirm the command (by returning a unique
MD5 key to the robot). Unless Mr A can access Mr B private mailbox,
there are absolutely no usurpation risk.

Since Sympa is very flexible, command behaviours are not hard-coded,
but defined in "scenarii". Basic scenarii are distributed with
sympa (in /home/sympa/bin/scenari), and you may define yours. Scenario
format is explain in the documentation. 

In this situation (Mr A willing to usubscribe Mr B), you could create 
your own scenari, rejecting the request or forwarding it to the owner.


Olivier Salaün