Re: Globally disabling sendto_form?
Nathan Van Gheem <[email protected]>
| Newsgroups | gmane.comp.web.zope.plone.devel |
|---|---|
| Message-ID | <CAL8hw9GnzzoOVdr-1Qnk4=F1qgTg_7wJFfe8qQ57k58YXTkGdg@mail.gmail.com> |
oh yes, that makes much more sense :) On Tue, Feb 18, 2014 at 12:40 PM, Vincent Fretin <[email protected]>wrote: > I think you meant: > site.manage_permission('Allow sendto', roles=('Manager',)) > > Vincent <http://www.ecreall.com> > > > On Tue, Feb 18, 2014 at 7:29 PM, Nathan Van Gheem <[email protected]>wrote: > >> And something like >> >> site.manage_permission('Allow sendto', roles=('Manage portal',)) >> >> is I think what you're looking for. >> >> *completely untested* >> >> >> On Tue, Feb 18, 2014 at 12:24 PM, Nathan Van Gheem <[email protected]>wrote: >> >>> BTW, in plone 5 we've set the sendto form to, by default, not allow >>> anoymous to use. >>> >>> >>> On Tue, Feb 18, 2014 at 12:20 PM, David Glick (Plone) < >>> david.glick-z4DKO/[email protected]> wrote: >>> >>>> Go to /manage_access and remove the Allow sendto permission from the >>>> Anonymous role (or the programmatic equivalent via a bin/instance run >>>> script) >>>> >>>> On 2/18/14, 10:12 AM, Matthew Vernon wrote: >>>> > Hi, >>>> > >>>> > We have discovered that sendto_form is being used by spammers on a >>>> > number of our Plone sites - while we don't link to it directly from >>>> > anywhere, they've clearly learned how to reach the form from the URL >>>> of >>>> > a normal Plone page. We're running 4.2.6 >>>> > >>>> > How can I bulk-disable this feature rapidly? We have around 200 sites, >>>> > so it needs to be something we can do from the command-line... >>>> > >>>> > I could presumably go into our eggs directory and remove >>>> > sendto_form.cpt, but then the next CMFPlone upgrade will end up >>>> putting >>>> > it back. >>>> > >>>> > Thanks, >>>> > >>>> > Matthew >>>> > >>>> >>>> >>>> >>>> ------------------------------------------------------------------------------ >>>> Managing the Performance of Cloud-Based Applications >>>> Take advantage of what the Cloud has to offer - Avoid Common Pitfalls. >>>> Read the Whitepaper. >>>> >>>> http://pubads.g.doubleclick.net/gampad/clk?id=121054471&iu=/4140/ostg.clktrk >>>> _______________________________________________ >>>> Plone-developers mailing list >>>> Plone-developers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org >>>> https://lists.sourceforge.net/lists/listinfo/plone-developers >>>> >>> >>> >>> >>> -- >>> Nathan Van Gheem >>> Solutions Architect >>> Wildcard Corp >>> >> >> >> >> -- >> Nathan Van Gheem >> Solutions Architect >> Wildcard Corp >> >> >> ------------------------------------------------------------------------------ >> Managing the Performance of Cloud-Based Applications >> Take advantage of what the Cloud has to offer - Avoid Common Pitfalls. >> Read the Whitepaper. >> >> http://pubads.g.doubleclick.net/gampad/clk?id=121054471&iu=/4140/ostg.clktrk >> _______________________________________________ >> Plone-developers mailing list >> Plone-developers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org >> https://lists.sourceforge.net/lists/listinfo/plone-developers >> >> > -- Nathan Van Gheem Solutions Architect Wildcard Corp ------------------------------------------------------------------------------ Managing the Performance of Cloud-Based Applications Take advantage of what the Cloud has to offer - Avoid Common Pitfalls. Read the Whitepaper. http://pubads.g.doubleclick.net/gampad/clk?id=121054471&iu=/4140/ostg.clktrk _______________________________________________ Plone-developers mailing list Plone-developers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org https://lists.sourceforge.net/lists/listinfo/plone-developers