[Mailman-Developers] Re: Issues with archiving

2019-09-03 Thread Abhilash Raj
On Tue, Sep 3, 2019, at 10:26 AM, sandeep kumar wrote:
> Hi
> 
> We are facing some issues in archiving the lists. Even though the list 
> is enabled to be private archive it is advertised to each and every one 
> irrespective of their role or anything. This will be a big data breach 
> if it goes the same way into the production.
> 
> We tried and figured out and blocked access to outside persons to view 
> archives. Only the list administrator and moderator can see their 
> archives after logging in. They can't even See the archives of other 
> lists.
> 
> Till here everything was smooth. But when I enter 
> https://hostname/hyperkitty after logging in,it displays all the list 
> archives irrespective of public and private to the person who has 
> logged in. We also observed database is not updating when we change the 
> private or public archive settings from postorius page. 
> 
> Any heads up would be appreciated

What version are you using? It takes about a day to sync those changes
if you just changed the archives from public to private.

There is a daily cron job which does the sync.

You can invoke it manually to run using `manage.py runjobs --daily` to
force sync. I am working on making this work synchronously.

What version of Hyperkitty are you using? It should show up in the footer
of every page.

Latest version hides the private archives from the list of MailingList. Even
if you can see the list, non-members can't see the contents.


> 
> Regards
> Sandeep

-- 
  thanks,
  Abhilash Raj (maxking)
___
Mailman-Developers mailing list -- mailman-developers@python.org
To unsubscribe send an email to mailman-developers-le...@python.org
https://mail.python.org/mailman3/lists/mailman-developers.python.org/
Mailman FAQ: https://wiki.list.org/x/AgA3

Security Policy: https://wiki.list.org/x/QIA9


[Mailman-Developers] Issues with archiving

2019-09-03 Thread sandeep kumar
Hi

We are facing some issues in archiving the lists. Even though the list is 
enabled to be private archive it is advertised to each and every one 
irrespective of their role or anything. This will be a big data breach if it 
goes the same way into the production.

We tried and figured out and blocked access to outside persons to view 
archives. Only the list administrator and moderator can see their archives 
after logging in. They can't even See the archives of other lists.

Till here everything was smooth. But when I enter https://hostname/hyperkitty 
after logging in,it displays all the list archives irrespective of public and 
private to the person who has logged in. We also observed database is not 
updating when we change the private or public archive settings from postorius 
page. 

Any heads up would be appreciated

Regards
Sandeep
___
Mailman-Developers mailing list -- mailman-developers@python.org
To unsubscribe send an email to mailman-developers-le...@python.org
https://mail.python.org/mailman3/lists/mailman-developers.python.org/
Mailman FAQ: https://wiki.list.org/x/AgA3

Security Policy: https://wiki.list.org/x/QIA9