mailman2 - mirror of https://code.launchpad.net/~mailman-coders/mailman/2.1

	Commit message (Collapse)	Author	Age	Files	Lines
*	- Fixed a bug which caused some authentication cookies to expire too soon	Mark Sapiro	2013-12-02	1	-3/+3
\| \| \| \|	if AUTHENTICATION_COOKIE_LIFETIME is non-zero.
*	Removed Python 2.5 dependency from fix for Bug #770377.	Mark Sapiro	2011-11-26	1	-2/+2
\|
*	Since context may be AuthUser, we must refresh the cookie where we have a user.	Mark Sapiro	2011-04-26	1	-2/+2
\|
*	A new list poster password has been implemented. This password may only	Mark Sapiro	2011-04-25	1	-0/+9
\| \| \| \| \| \|	be used in Approved: or X-Approved: headers for pre-approving posts. Using this password for that purpose precludes compromise of a more valuable password sent in plain text email. Bug #770581.
*	A new mm_cfg.py setting AUTHENTICATION_COOKIE_LIFETIME has been added.	Mark Sapiro	2011-04-25	1	-1/+6
\| \| \| \| \| \|	If this is set to a non-zero value, web authentication cookies will expire that many seconds following their last use. Its default value is zero to preserve current behavior.
*	Mailman now sets the 'secure' flag in cookies set via https URLs.	Mark Sapiro	2011-04-25	1	-1/+6
\| \| \| \|	Bug #770377.
*	Inadvertently setting a null site or list password allowed access	Mark Sapiro	2009-09-03	1	-0/+3
\| \| \| \| \|	to a list's web admin interface without authentication. Fixed by not accepting null passwords.
*	trunk	Barry Warsaw	2008-11-29	1	-1/+2
\|\
\| *	Fixed a problem in SecurityManager that caused it to not find the	Mark Sapiro	2008-11-20	1	-2/+3
\| \| \| \| \| \| \| \| \| \|	cookie when CheckCookie was not given a user and the user in the cookie had a %xx encoded character. Bug # 299220.
* \|	Apply Heiko Rommel's patch for hashlib deprecation warnings for bug 293178.	Barry Warsaw	2008-11-12	1	-8/+7
\|/ \| \| \|	I've modified the patch to improve some of the stylistic issues.
*	Back port Python 2.5 compatibility changes to Mailman 2.1. Specifically,	bwarsaw	2006-07-30	1	-9/+11
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	- In SecurityManager.py, fix the parsecookie() code to work with Python 2.5 generated cookie text. The latter was changed to be more RFC compliant so it does not output trailing semicolons for each line of cookie text. This broke the splitting rules, so now first split on newlines, then on ';\s*'. This should work across all Python versions. - In Python 2.5, exceptions are new-style, and thus are no longer of ClassType. The instantiation type test in hold_for_approval() was too naive. This one is fixed differently here than in the MM trunk because in Python 2.1, 'type' isn't a type, it's a function and so can't be used as the second argument to isinstance() directly. - Raising strings generates deprecation warnings in Python 2.5. Switch the one weird use of this in Utils.py to use a class exception. Don't call it "quick exit" though because it's probably not.
*	FSF office has moved to 51 Franklin Street.	tkikuchi	2005-08-27	1	-1/+1
\|
*	We have to escape other special characters like '=', so use urllib.	tkikuchi	2004-11-25	1	-1/+3
\|
*	[ 1030228 ] Mass Subscribe address with control character - can't delete	tkikuchi	2004-10-09	1	-1/+1
\| \| \| \|	Also, '/' can be used now.
*	__checkone(): Patch 869644, ignore NotAMemberError that can get raised	bwarsaw	2004-01-03	1	-2/+5
\| \| \| \| \| \|	from AuthContextInfo() when old cookie data is for someone no longer a member of the mailing list. Closes SF bug # 869647. Bug and patch by Stephan Berndts.
*	Authenticate(): When authenticating AuthUser, wrap the	bwarsaw	2003-12-26	1	-35/+40
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	self.authenticateMember() call in a try/except catching and ignoring NotAMemberErrors. The effect of this is that other authcontexts being check will then proceed as normal. This fixes admin login to the private archives, and non-public rosters. Under the old code, if you tried to get into the private archives w/o entering an email address, but using the admin password, you'd be denied access. WebAuthenticate(): Removed the wrapping of .Authenticate() in try/except catching of NotAMemberError, since this should never percolate out now. Also, use True/False everywhere it's appropriate (but not in the cookie code). Original bug and patch by Stephan Berndts. Closes SF bug # 864676 and SF patch # 864674.
*	Backporting from the trunk.	bwarsaw	2003-02-08	1	-12/+26
\|
*	This commit was manufactured by cvs2svn to create branch		2003-01-02	1	-0/+333
	'Release_2_1-maint'.