Skip to Content.
Sympa Menu

en - RE: [sympa-users] Data Store configuration access by list owner

Subject: The mailing list for listmasters using Sympa

List archive

Chronological Thread  
  • From: Steve Shipway <address@concealed>
  • To: "'John Gibson'" <address@concealed>, "'address@concealed'" <address@concealed>
  • Subject: RE: [sympa-users] Data Store configuration access by list owner
  • Date: Sun, 10 Nov 2013 22:54:11 +0000

This is definitely possible; in fact, we do it.  Our setup allows privileged list owners to configure list subscriber datasources, although you could allow any owner to do this.

 

The file to configure is your /etc/sympa/edit_list.conf file (though you may have it in a different location; it will be in your base config dir).  It has a lot of comments at the top to helpfully explain the file format and options.

 

Try adding something like this:

 

include_file                    owner           read

include_remote_file             owner           read

include_list                    owner           read

include_sql_query               owner           read

include_ldap_query              owner           read

include_ldap_2level_query       owner           read

include_remote_sympa_list       owner           read

include_admin                   owner           read

#include_ldap_query.passwd      owner           hidden

 

include_file                    privileged_owner                write

include_remote_file             privileged_owner                write

include_list                    privileged_owner                write

include_sql_query               privileged_owner                write

include_ldap_query              privileged_owner                write

include_ldap_2level_query       privileged_owner                write

include_remote_sympa_list       privileged_owner                write

include_admin                   privileged_owner                write

 

The above will allow priv owners to edit included datasources, and non-priv owners can view the configuration.  The commented-out line can be enabled if you do not want non-privileged owners to view ldap passwords (probably a good thing).

 

However – you cannot allow people access individually.  So, make the list owners you want to have these rights ‘privileged’ owners and the other just regular owners.

 

Steve

 


Steve Shipway

ITS Unix Services Design Lead

University of Auckland, New Zealand

Floor 1, 58 Symonds Street, Auckland

Phone: +64 (0)9 3737599 ext 86487

DDI: +64 (0)9 923 6487

Mobile: +64 (0)21 753 189

Email: address@concealed

P Please consider the environment before printing this e-mail : 打印本邮件,将减少一棵树存活的机会

 

From: address@concealed [mailto:address@concealed] On Behalf Of John Gibson
Sent: Saturday, 9 November 2013 9:10 a.m.
To: address@concealed
Subject: [sympa-users] Data Store configuration access by list owner

 

I am able as the master admin to modify the data store queries for a list.

 

I would like to delegate that task to the list owner.  The list owner would be able to bring up the web page and modify the MySQL select query.

 

The page for the data store changes does not come up for regular list owners… even if they are privileged.

 

Is it possible to allow certain list owners this configuration access ?

 

…john

 

John Gibson

Unix Systems Administrator

Art Center College of Design

address@concealed

Attachment: smime.p7s
Description: S/MIME cryptographic signature




Archive powered by MHonArc 2.6.19+.

Top of Page