Re: Globally disabling sendto_form?

Nathan Van Gheem <[email protected]>
Newsgroups gmane.comp.web.zope.plone.devel
Message-ID <CAL8hw9GTteF_sG1J1=t_Uvv6Aj3QA2rk9ZgB0Q=fopWe+sNTvg@mail.gmail.com>
And something like

site.manage_permission('Allow sendto', roles=('Manage portal',))

is I think what you're looking for.

*completely untested*


On Tue, Feb 18, 2014 at 12:24 PM, Nathan Van Gheem <[email protected]>wrote:

> BTW, in plone 5 we've set the sendto form to, by default, not allow
> anoymous to use.
>
>
> On Tue, Feb 18, 2014 at 12:20 PM, David Glick (Plone) <
> david.glick-z4DKO/[email protected]> wrote:
>
>> Go to /manage_access and remove the Allow sendto permission from the
>> Anonymous role (or the programmatic equivalent via a bin/instance run
>> script)
>>
>> On 2/18/14, 10:12 AM, Matthew Vernon wrote:
>> > Hi,
>> >
>> > We have discovered that sendto_form is being used by spammers on a
>> > number of our Plone sites - while we don't link to it directly from
>> > anywhere, they've clearly learned how to reach the form from the URL of
>> > a normal Plone page. We're running 4.2.6
>> >
>> > How can I bulk-disable this feature rapidly? We have around 200 sites,
>> > so it needs to be something we can do from the command-line...
>> >
>> > I could presumably go into our eggs directory and remove
>> > sendto_form.cpt, but then the next CMFPlone upgrade will end up putting
>> > it back.
>> >
>> > Thanks,
>> >
>> > Matthew
>> >
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Managing the Performance of Cloud-Based Applications
>> Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
>> Read the Whitepaper.
>>
>> http://pubads.g.doubleclick.net/gampad/clk?id=121054471&iu=/4140/ostg.clktrk
>> _______________________________________________
>> Plone-developers mailing list
>> Plone-developers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
>> https://lists.sourceforge.net/lists/listinfo/plone-developers
>>
>
>
>
> --
> Nathan Van Gheem
> Solutions Architect
> Wildcard Corp
>



-- 
Nathan Van Gheem
Solutions Architect
Wildcard Corp

------------------------------------------------------------------------------
Managing the Performance of Cloud-Based Applications
Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
Read the Whitepaper.
http://pubads.g.doubleclick.net/gampad/clk?id=121054471&iu=/4140/ostg.clktrk

_______________________________________________
Plone-developers mailing list
Plone-developers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
https://lists.sourceforge.net/lists/listinfo/plone-developers
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.