Re: how to determine who approved a posting ... ?

On Thu, 20 Jan 2011, Alvaro Herrera wrote:

> Excerpts from Steven W. Orr's message of jue ene 20 10:21:16 -0300 2011:
>> On 1/19/2011 11:00 AM, Marc G. Fournier wrote:
>>>
>>> We have several lists on postgresql.org where there are more then one
>>> moderator ... is there a way of determine *which* moderator approved the posting?
>
>> I'll take a stab at this one: If you have a list of moderators and they have
>> the token used to approve, then the act of having the token is the definition
>> of the security system. Anyone who has that token can approve it and since the
>> token also comes with the ability to approve via the web confirmation
>> interface, the confirmation is inherently as anonymous as there are people who
>> are moderators. If the confirmation is done from the commandline, or via
>> email, you might be able to see whodunnit, but if it happened from the web
>> interface...
>
> I was thinking that it might be possible to patch Mj2 so that the
> approving moderator was saved in a header.  But, as you say, if someone
> approves using the token, then there's no way to know what moderator
> used it.  (It would be necessary to send different tokens to each
> moderator, and store the moderator's identity in the token server-side.)

I may be missing something here, but assuming we are talking about a token 
sent through email, vs the web interface, could we not store the email 
address who *used* that token successfully?  By successfully, I'm thinking 
the on etha tcaused the message to be released, vs any that come in after 
it ... ?

Through the web interface, it should be even easier, as each moderator has 
their own login credentials ...


  ----
Marc G. Fournier                        Hub.Org Hosting Solutions S.A.
[email protected]                                     http://www.hub.org

Yahoo:yscrappy    Skype: hub.org    ICQ:7615664    MSN:[email protected]