Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Rejection message returned when suscribing to a list restricted info access #193

Closed
mdurandGH opened this issue Feb 13, 2018 · 9 comments
Closed
Labels
Milestone

Comments

@mdurandGH
Copy link

mdurandGH commented Feb 13, 2018

Hello,
And first of all my excuses for my poor English, it's such a long time I haven't spoken !
Here is my situation and request : I have created several lists with Framalistes.org using Sympa, all in "author" or "private" mode, which means anyone can subscribe but with my authorization.
I have encountered an issue found when someone is trying to subscribe to one of this list : in fact, he receive a kind of purple banner (from Framalistes I guess ?) written : "Access denied : you are not allowed to do this action.", so that people think it didn't work and try again and again...
I would prefer them to read something like "your demand has been registered but requires a manual validation ; you'll be soon noticed when it will be done".
But I don't find a way to change this message : it seams easy to create or change message for people who've already subscribed and are on the list, but I find nothing to create or change the message to someone who hasn't subscribed yet and has no rights.
Thanks a lot for help and have a good day all !
mdurandGH

@ikedas
Copy link
Member

ikedas commented Feb 14, 2018

Hi @mdurandGH,

What are "author" and "private" modes? Please show us the screen shot of web page where you saw these modes.

@mdurandGH
Copy link
Author

Hi ikedas,
Thanks for interest and sorry cause I made a mistake : it was "auth" and "owner", which are privileges settings (I though they were due to sympa, but maybe only set by framalistes ?), to decide who is allowed to subscribe or not :
"auth" = subscription request confirmed
"owner" = needs owner approval
NB : "private" is a confidentiality setting (who can access to list information, or who is able to invite new subscribers, etc.)
Here is a screen shot :
image

@ikedas
Copy link
Member

ikedas commented Feb 18, 2018

@mdurandGH,
When "someone is trying to subscribe to one of this list", what operation did that person perform? (For example: she/he sent a message to the address xxx@xxxx; she/he opened the URL xxx then clicked xxx button...) Please describe us the details.

@mdurandGH
Copy link
Author

@ikedas
Thanks for your return.

At first the problem occured with the second method : after opening the URL : https://framalistes.org/sympa/subscribe/[name of the list], adding his/her email and clicking "OK", people see this message :
image
(means "ACCES DENIED (information) : you are not allowed to do this action")
That's where I would prefer a message like "your demand has been registered but requires a manual validation ; you'll be soon notified when it will be done" whithout finding how to set this.

After your message I also tried to add someone by writing a mail from his adress to sympa@framalistes.org, with "subscribe [nameofthelist]" in subject, and this time it is ok, cause the subscriber receive back a mail telling : "La commande a été exécutée : subscribe [nameofthelist] sent_to_owner Votre demande d'abonnement (ou de désabonnement) a été envoyée aux
propriétaires de la liste pour examen. Vous recevrez une notification lorsque ceux-ci vous auront abonné (ou désabonné) à la liste."
Which means : "The command has been executed : subscribe [nameofthelist] sent_to_owner ; Your subscribing (or unscubscribing) demand has been sent to list owners for validation. You will be notified when they will accept your subscription (or unsubscription)."

That is exactly the kind of message I would expect with the graphic method, the one that is used by most people who don't understand anything to this lists things and just would like to receive messages ;-)

Thanks again, have a good day !

@ikedas ikedas added bug and removed question labels Feb 20, 2018
@ikedas
Copy link
Member

ikedas commented Feb 20, 2018

@mdurandGH, I got it.

After a user successfully subscribed to a list using web, she/he will be redirected to list information page https://framalistes.org/sympa/info/[name of the list]. However, your list has a setting "Who can view list information" to "restricted to subscribers (private)". If the user has not logged in, Sympa cannot know who is the user, and decides that this user is not a subscriber. That's why the message "ACCES REFUSE" is shown.

One workaround is setting "Who can view list information" to "for anyone (open)".

However, someone obviously won't prefer to exposing their list to the public. I think it is a bug to be fixed.

@racke
Copy link
Contributor

racke commented Feb 20, 2018

Sounds like a bug to me too - at least user should be asked to login before viewing the list information.

ikedas added a commit to ikedas/sympa that referenced this issue Feb 26, 2018
…er be shown. Instead, the user quietly redirected to home page. This change deals with two cases:

  - If a user successfully subscribed to a list and it's private list, user would see rejection message, because they have not logged in.
  - User could know whether arbitrary list exists or not, because private list rejected them with the message different from non-existing list.

This may fix issue sympa-community#193.
@ikedas ikedas added this to the 6.2.26 milestone Feb 26, 2018
@ikedas ikedas changed the title Message returned when suscribing to a "private" or "author" list Rejection message returned when suscribing to a list restricted info access Feb 26, 2018
@ikedas
Copy link
Member

ikedas commented Feb 28, 2018

Please check a patch to fix problem.

@mdurandGH
Copy link
Author

Thanks @ikedas and @racke for your returns and patch !
The Framalistes team has been informed and will integrate the patch with the next service update (unknown date by now).

@ikedas
Copy link
Member

ikedas commented Mar 6, 2018

@mdurandGH, thanks for information. Closed.

@ikedas ikedas closed this as completed Mar 6, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

3 participants