Hung Phan wrote: > >While we testing the password reminder feature, we discover that a user asking >for password reminder from a specific list that s/he isn't a member of that >list, s/he still receives the message "A reminder of your password has been >emailed to you." Is this an expected behavior?
If the list's Privacy options... -> Subscription rules -> private_roster attribute is set to Anyone (i.e. if the list membership roster is public), a non-member requesting a reminder will be told "No such member". Otherwise, the user gets the same message whether or not she is a member to prevent using the reminder request to "fish" for list membership. On the "never to be released" branch at <https://code.launchpad.net/~mailman-coders/mailman/2.2>, the message is changed to "If you are a list member, your password has been emailed to you.", but it has not been changed on the 2.1 branch for i18n reasons. -- Mark Sapiro <m...@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan ------------------------------------------------------ Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
