Re: [Mailman-Developers] User-centric authentication and access control

2015-09-09 Thread Barry Warsaw
On Sep 02, 2015, at 06:20 AM, Andrew Stuart wrote: >Sorry I should say - I don’t think roles exist in Mailman 3? Someone else >will know but I don’t recall offhand. They do a little bit, but in a limited way. The roles are really just site-owner, domain-owner, list-owner, moderator, list-member,

Re: [Mailman-Developers] User-centric authentication and access control

2015-09-07 Thread Barry Warsaw
On Sep 02, 2015, at 06:17 AM, Andrew Stuart wrote: >If users still sign in directly, what do you see the functionality of roles >being from a Mailman perspective? I don’t see how they relate Mailman >resources specifically. Core really only has a small handful of roles, e.g. member, nonmember, li

Re: [Mailman-Developers] User-centric authentication and access control

2015-09-02 Thread Simon Hanna
On Tue, Sep 01, 2015 at 09:02:00PM -0400, Waldbieser, Carl wrote: > > I am currently using Mailman 2. > If Mailman 3 provides the features I am interested in, that would be great, > provided there is some kind of well-defined upgrade path. AFAIK the official statement is that Mailman 3.1 will pro

Re: [Mailman-Developers] User-centric authentication and access control

2015-09-01 Thread Andrew Stuart
om: "Andrew Stuart" To: "waldbiec" Cc: "mailman-developers" Sent: Tuesday, September 1, 2015 9:58:32 PM Subject: Re: [Mailman-Developers] User-centric authentication and access control Postorius is a Django app that talks directly to the Mailman 3 REST API and

Re: [Mailman-Developers] User-centric authentication and access control

2015-09-01 Thread Waldbieser, Carl
Cc: "mailman-developers" Sent: Tuesday, September 1, 2015 9:58:32 PM Subject: Re: [Mailman-Developers] User-centric authentication and access control Postorius is a Django app that talks directly to the Mailman 3 REST API and integrates everything needed to get the job done including

Re: [Mailman-Developers] User-centric authentication and access control

2015-09-01 Thread Andrew Stuart
Postorius is a Django app that talks directly to the Mailman 3 REST API and integrates everything needed to get the job done including user interface, authentication and authorization. Mailmania is an authenticating reverse proxy server. Effectively it would allow someone to write a purely Jav

Re: [Mailman-Developers] User-centric authentication and access control

2015-09-01 Thread Waldbieser, Carl
/overview Thanks, Carl - Original Message - From: "Simon Hanna" To: "waldbiec" Cc: "mailman-developers" Sent: Tuesday, September 1, 2015 5:14:08 PM Subject: Re: [Mailman-Developers] User-centric authentication and access control On Tue, Sep 01, 2015 a

Re: [Mailman-Developers] User-centric authentication and access control

2015-09-01 Thread Simon Hanna
On Tue, Sep 01, 2015 at 11:15:47AM -0400, Waldbieser, Carl wrote: > I know that currently, mailman roles are set up such that the roles > themselves have a shared password per role. I want to be able to move away > from that model and have roles assigned to individual user accounts that > would

Re: [Mailman-Developers] User-centric authentication and access control

2015-09-01 Thread Mark Sapiro
On 09/01/2015 08:15 AM, Waldbieser, Carl wrote: > I know that currently, mailman roles are set up such that the roles > themselves have a shared password per role. This is true for MM 2.1. It is not true for MM 3. > I want to be able to move away from that model and have roles assigned to indi

Re: [Mailman-Developers] User-centric authentication and access control

2015-09-01 Thread Andrew Stuart
It might be helpful if I explain what Mailmania does. login - an anonymous HTTP request can be sent to the server asking to log in and POSTing Mailman username and password. Success results in a response with a JWT in the HTTP headers. authentication - when an HTTP request arrives, it is examine

[Mailman-Developers] User-centric authentication and access control

2015-09-01 Thread Stephen J. Turnbull
Waldbieser, Carl writes: > I would like to actually move the authentication and role > management *outside* of mailman and have the administrative > interface consume the role based information from external sources > (e.g. LDAP, CAS or SAML2 attribute release), so I am looking for a > more "

Re: [Mailman-Developers] User-centric authentication and access control

2015-09-01 Thread Andrew Stuart
Sorry I should say - I don’t think roles exist in Mailman 3? Someone else will know but I don’t recall offhand. ___ Mailman-Developers mailing list Mailman-Developers@python.org https://mail.python.org/mailman/listinfo/mailman-developers Mailman FAQ: htt

Re: [Mailman-Developers] User-centric authentication and access control

2015-09-01 Thread Andrew Stuart
If users still sign in directly, what do you see the functionality of roles being from a Mailman perspective? I don’t see how they relate Mailman resources specifically. The authenticating proxy server (which is still awaiting a better name - Barry? :-)) currently gives individuals control over

[Mailman-Developers] User-centric authentication and access control

2015-09-01 Thread Waldbieser, Carl
I know that currently, mailman roles are set up such that the roles themselves have a shared password per role. I want to be able to move away from that model and have roles assigned to individual user accounts that would allow access to the admin interfaces for individual lists. For example,