Re: [Mailman-Users] listname-request who command

2007-03-22 Thread Mark Sapiro
Patrick Bogen wrote: >On 3/21/07, Jennifer Oxelson <[EMAIL PROTECTED]> wrote: >> The issue is I can send the 'who' email command with the admin password >> from /*any*/ email address (not even subscribed) and get the roster... >> is this right? Wouldn't it be better if the 'who' command only wor

Re: [Mailman-Users] listname-request who command

2007-03-21 Thread Patrick Bogen
On 3/21/07, Jennifer Oxelson <[EMAIL PROTECTED]> wrote: > The issue is I can send the 'who' email command with the admin password > from /*any*/ email address (not even subscribed) and get the roster... > is this right? Wouldn't it be better if the 'who' command only worked > for email addresses

[Mailman-Users] listname-request who command

2007-03-21 Thread Jennifer Oxelson
Hello, Sending email to the listname-request alias, I'm able to verify that I can everyone who is on a mailing list by supplying the list administrator or moderator password to retrieve the roster (I have the list roster is limited to list administrators and moderators only). The issue is I