Re: how to determine who approved a posting ... ?

Excerpts from Marc G. Fournier's message of jue ene 20 13:59:50 -0300 201=
1:
> On Thu, 20 Jan 2011, Alvaro Herrera wrote:

> > I was thinking that it might be possible to patch Mj2 so that the
> > approving moderator was saved in a header.  But, as you say, if someo=
ne
> > approves using the token, then there's no way to know what moderator
> > used it.  (It would be necessary to send different tokens to each
> > moderator, and store the moderator's identity in the token server-sid=
e.)
>=20
> I may be missing something here, but assuming we are talking about a to=
ken=20
> sent through email, vs the web interface, could we not store the email=20
> address who *used* that token successfully?  By successfully, I'm think=
ing=20
> the on etha tcaused the message to be released, vs any that come in aft=
er=20
> it ... ?

Well, you are correct that we could use the email address that sends the
authorization for a token (though that could be a fake address), but the
token can also used on the web interface *without* logging in first.

--=20
=C3=81lvaro Herrera -- Se vende casa en =C3=91u=C3=B1oa: www.portalinmobi=
liario.com/993147