Subject: The mailing list for listmasters using Sympa
List archive
Re: [sympa-users] Restricting access to the Sympa website, based on users who are subscribed to a private Sympa mailing list.
- From: Steve Shipway <address@concealed>
- To: Mark London <address@concealed>, address@concealed
- Subject: Re: [sympa-users] Restricting access to the Sympa website, based on users who are subscribed to a private Sympa mailing list.
- Date: Tue, 08 May 2018 12:26:30 +1200
On Mon, 2018-05-07 at 01:19 -0400, Mark London wrote:
Steve - Thanks for the info. I am trying to avoid using LDAP, because Sympa itself is already based on a database, and I would like to have a self contained site. Plus, I've spent decades hating LDAP. :) Regarding the 2nd option that you used, i.e. "Let everyone access the Sympa website, but the visibility scenario all say they must be on the list. Therefore they see nothing until they have logged in with a valid identity", and "this allowed us to have a small number of public lists but most require login to access or see." If understand this correctly, it appears that most of your mailing lists were set to be invisible, unless the person was subscribed to that list. Wouldn't that require me having to manually subscribe people to those lists? I'm trying to avoid doing this. I want to restrict access to my site, but I want people with login access, to be able to easily subscribe or unsubscribe themselves to my mailing list, without my intervention.
Most of our mailing lists were set to invisible, unless the user was a member of a special central list (the 'staff' list). Although mailing lists don't need to be visible to be subscribed to... This allowed us to delegate management of the list used for authorisation to other people without having to hand over listmaster rights to anyone.
You can set the 'subscribe' scenario and 'visibility' scenario for your lists to be one which requires your user to be logged in, and to be a member of the special private sympa list. Then, you just need to add them to that list, and immediately all the other lists will become visible and subscribeable.
This would mean that anyone can log in, but they can't see anything unless they're on the special list.
If you inherit authentication from your web server, then you could potentially have that using auth_mysql (or similar) to authenticate against the Sympa database, and to run a query that ensures membership in the special list, though I am not able to give you the exact settings.
If you're not using LDAP, then I would be inclined to let everyone log in, but use the Sympa visibility scenario to restrict things, rather than try to restrict things at webserver login time.
Steve
--
Steve Shipway | Senior Email Systems Administrator
Phone: +64 9 302 0515 Fax: +64 9 302 0518
Freephone: 0800 SMX SMX (769 769)
SMX Limited: Level 15, 19 Victoria Street West, Auckland, New Zealand
Web: http://smxemail.com
Phone: +64 9 302 0515 Fax: +64 9 302 0518
Freephone: 0800 SMX SMX (769 769)
SMX Limited: Level 15, 19 Victoria Street West, Auckland, New Zealand
Web: http://smxemail.com
-
[sympa-users] Restricting access to the Sympa website, based on users who are subscribed to a private Sympa mailing list.,
Mark London, 05/04/2018
-
Re: [sympa-users] Restricting access to the Sympa website, based on users who are subscribed to a private Sympa mailing list.,
Steve Shipway, 05/04/2018
-
Re: [sympa-users] Restricting access to the Sympa website, based on users who are subscribed to a private Sympa mailing list.,
Mark London, 05/07/2018
- Re: [sympa-users] Restricting access to the Sympa website, based on users who are subscribed to a private Sympa mailing list., Steve Shipway, 05/08/2018
-
Re: [sympa-users] Restricting access to the Sympa website, based on users who are subscribed to a private Sympa mailing list.,
Mark London, 05/07/2018
-
Re: [sympa-users] Restricting access to the Sympa website, based on users who are subscribed to a private Sympa mailing list.,
Steve Shipway, 05/04/2018
Archive powered by MHonArc 2.6.19+.