Re: Globally disabling sendto_form?

David Carter <dpc22-KWPb1pKIrIJaa/[email protected]> writes:

> On 2014-02-18 18:40, Vincent Fretin wrote:
>> I think you meant:
>> site.manage_permission('Allow sendto', roles=('Manager',))
>
> Actually it turns out to be:
>
>    site.manage_permission('Allow sendto', roles=())
>
> as the sendto_form view runs with Manager role. But thanks for the
> hint.

I'm not sure what you are trying to say here. There is no indication in
the code that it would somehow override the normal Zope permission
management and also my own tests on my sites show that only assigning
the "Allow sendto" permission to the "Authenticated" role prohibits
unauthenticated users from sending mail through the form while still
allowing authenticated users to use the form.

The form is still shown to unauthenticated users, but sending fails with
an error message.

Of course if you are logged in with an account that has the Manager role
in the context of the form, then you are allowed to send mail through
the form. But that's the intention of the command above.

Gaudenz

>
> With my postmaster-KWPb1pKIrIJaa/[email protected] hat on, I confess to being rather appalled 
> to discover Plone ships as a spam open relay. Spammers are clearly 
> looking for these sendto_form pages.
>
> -- 
> David Carter                             Email: 
> David.Carter-IE+S/[email protected]
> University of Cambridge,                 Phone: (01223) 334502
> Information Services,                    Fax:   (01223) 334679
> 7 J J Thomson Avenue,
> Cambridge UK.  CB3 0RB
>
> ------------------------------------------------------------------------------
> Managing the Performance of Cloud-Based Applications
> Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
> Read the Whitepaper.
> http://pubads.g.doubleclick.net/gampad/clk?id=121054471&iu=/4140/ostg.clktrk
> _______________________________________________
> Plone-developers mailing list
> Plone-developers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> https://lists.sourceforge.net/lists/listinfo/plone-developers
>

-- 
Ever tried. Ever failed. No matter.
Try again. Fail again. Fail better.
~ Samuel Beckett ~

------------------------------------------------------------------------------
Managing the Performance of Cloud-Based Applications
Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
Read the Whitepaper.
http://pubads.g.doubleclick.net/gampad/clk?id=121054471&iu=/4140/ostg.clktrk