|
Sender: |
Revised LISTSERV forum <LSTSRV-L@DEARN> |
Subject: |
|
From: |
Eric Thomas <ERIC@FRECP11> |
Date: |
Sat, 12 Mar 88 19:13:01 SET |
In-Reply-To: |
Your message of Sat, 12 Mar 88 17:42:54 CET |
Reply-To: |
Revised LISTSERV forum <LSTSRV-L@DEARN> |
Please keep in mind that whatever the implementation, the postmaster will
have to store the file himself, otherwise you have a security expose.
What I mean is:
- The list owner controls what gets put in the list header, and we don't
want to change that.
- If the list owner can choose the fileid, we have a security exposure.
- If the fileid is fixed (eg 'listname GREETING'), the postmaster still
needs to authorize the list owner to store it; and if the contents of
this file contain MAILFORM information, the postmaster must check it
out before installing it, for security reasons.
The only thing you could allow a list owner to do without postmaster
authorization is to place a pure-text blurb (nothing interpreted) into
the greeting mailforms; this blurb would have to be defined in the list
header itself.
I don't think this would provide enough functionality, except in some
particular cases: mailform interpretation is almost always needed.
Besides, you don't have to maintain a full mailform if you only want to
change the greeting: just create a mailform file containing only the
updated $SIGNUP and LISTSERV will automatically pick up the other
messages from the standard mailform file.
Eric
|
|
|