Activity log for bug #1443400

Date Who What changed Old value New value Message
2015-04-13 12:02:07 Ankush Sharma bug added bug
2015-04-13 12:03:13 Ankush Sharma description There should be a button or some navigation menu available to redirect users to the list settings, members or delete pages of their owned lists so that they can mass subscribe users and do other stuff. It is quite clear that a list owner is a super user for **his owned lists** . The use of `list_owner_required` decorator justifies it [1]. For eg. a user can access the following URLs if he is the owner of `list_abc` : <base-url>/postorius/lists/list_abc/members/ <base-url>/postorius/lists/list_abc/settings/ <base-url>/postorius/lists/list_abc/delete/ [1] : http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/views/list.py#L455 http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/views/list.py#L238 There should be a button or some navigation menu available to redirect users to the list settings, members or delete pages of their owned lists so that they can mass subscribe users and do other stuff. It is quite clear that a list owner is a super user for **his owned lists** . The use of `list_owner_required` decorator justifies it [1]. For eg. a user can access the following URLs if he is the owner of `list_abc` :  <base-url>/postorius/lists/list_abc/members/  <base-url>/postorius/lists/list_abc/settings/  <base-url>/postorius/lists/list_abc/delete/ [1] : http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/views/list.py#L455          http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/views/list.py#L238
2015-04-13 12:03:18 Ankush Sharma postorius: assignee Ankush Sharma (black-perl)
2015-04-13 12:03:22 Ankush Sharma postorius: status New In Progress
2015-04-13 12:26:55 Ankush Sharma tags postorius
2015-04-13 12:41:33 Ankush Sharma description There should be a button or some navigation menu available to redirect users to the list settings, members or delete pages of their owned lists so that they can mass subscribe users and do other stuff. It is quite clear that a list owner is a super user for **his owned lists** . The use of `list_owner_required` decorator justifies it [1]. For eg. a user can access the following URLs if he is the owner of `list_abc` :  <base-url>/postorius/lists/list_abc/members/  <base-url>/postorius/lists/list_abc/settings/  <base-url>/postorius/lists/list_abc/delete/ [1] : http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/views/list.py#L455          http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/views/list.py#L238 There should be a button or some navigation menu available as we have in case of a super user for redirecting users to the list settings, members or delete pages of their owned lists so that they can mass subscribe users and do other stuff. It is quite clear that a list owner is a super user for **his owned lists** . The use of `list_owner_required` decorator justifies it [1]. Similarly `list moderators` should be able to access held messages through this navigation menu. For eg. a user can access the following URLs if he is the owner of `list_abc` :  <base-url>/postorius/lists/list_abc/members/  <base-url>/postorius/lists/list_abc/settings/  <base-url>/postorius/lists/list_abc/delete/ [1] : http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/views/list.py#L455 http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/views/list.py#L238
2015-04-13 19:19:09 Ankush Sharma description There should be a button or some navigation menu available as we have in case of a super user for redirecting users to the list settings, members or delete pages of their owned lists so that they can mass subscribe users and do other stuff. It is quite clear that a list owner is a super user for **his owned lists** . The use of `list_owner_required` decorator justifies it [1]. Similarly `list moderators` should be able to access held messages through this navigation menu. For eg. a user can access the following URLs if he is the owner of `list_abc` :  <base-url>/postorius/lists/list_abc/members/  <base-url>/postorius/lists/list_abc/settings/  <base-url>/postorius/lists/list_abc/delete/ [1] : http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/views/list.py#L455 http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/views/list.py#L238 There should be a button or some navigation menu available as we have in case of a super user for redirecting users to the list settings, members or delete pages of their owned lists so that they can mass subscribe users and do other stuff. It is quite clear that a list owner is a super user for **his owned lists** . The use of `list_owner_required` decorator justifies it [1]. Similarly `list moderators` should be able to access held messages through this navigation menu. For eg. a user can access the following URLs if he is the owner of `list_abc` :  <base-url>/postorius/lists/list_abc/members/  <base-url>/postorius/lists/list_abc/settings/  <base-url>/postorius/lists/list_abc/delete/ [1] : http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/views/list.py#L455 http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/views/list.py#L238 Similarly, At http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/templates/postorius/menu/list_nav.html#L18 ; why a *list_moderator *is allowed to view the `*Mass Subscribe`* link on the list navigation bar ? Though clicking it will give a *403* again as he has not permission for it. I think it should be *list_owner.
2015-04-13 19:22:00 Ankush Sharma description There should be a button or some navigation menu available as we have in case of a super user for redirecting users to the list settings, members or delete pages of their owned lists so that they can mass subscribe users and do other stuff. It is quite clear that a list owner is a super user for **his owned lists** . The use of `list_owner_required` decorator justifies it [1]. Similarly `list moderators` should be able to access held messages through this navigation menu. For eg. a user can access the following URLs if he is the owner of `list_abc` :  <base-url>/postorius/lists/list_abc/members/  <base-url>/postorius/lists/list_abc/settings/  <base-url>/postorius/lists/list_abc/delete/ [1] : http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/views/list.py#L455 http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/views/list.py#L238 Similarly, At http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/templates/postorius/menu/list_nav.html#L18 ; why a *list_moderator *is allowed to view the `*Mass Subscribe`* link on the list navigation bar ? Though clicking it will give a *403* again as he has not permission for it. I think it should be *list_owner. There should be a button or some navigation menu available as we have in case of a super user for redirecting users to the list settings, members or delete pages of their owned lists so that they can mass subscribe users and do other stuff. It is quite clear that a list owner is a super user for **his owned lists** . The use of `list_owner_required` decorator justifies it [1]. Similarly `list moderators` should be able to access held messages through this navigation menu. For eg. a user can access the following URLs if he is the owner of `list_abc` :  <base-url>/postorius/lists/list_abc/members/  <base-url>/postorius/lists/list_abc/settings/  <base-url>/postorius/lists/list_abc/delete/ [1] : http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/views/list.py#L455 http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/views/list.py#L238 Similarly, At http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/templates/postorius/menu/list_nav.html#L18 ; why a *list_moderator* is allowed to view the *Mass Subscribe* link on the list navigation bar ? Though clicking it will give a *403* again as he has not permission for it. I think it should be *list_owner.
2015-04-13 19:50:29 Ankush Sharma summary No link to redirect a user to his owned list settings/mass-subscribe/members-info pages Wrong permissions in list_nav.html for Mass Subscription
2015-04-13 19:51:33 Ankush Sharma description There should be a button or some navigation menu available as we have in case of a super user for redirecting users to the list settings, members or delete pages of their owned lists so that they can mass subscribe users and do other stuff. It is quite clear that a list owner is a super user for **his owned lists** . The use of `list_owner_required` decorator justifies it [1]. Similarly `list moderators` should be able to access held messages through this navigation menu. For eg. a user can access the following URLs if he is the owner of `list_abc` :  <base-url>/postorius/lists/list_abc/members/  <base-url>/postorius/lists/list_abc/settings/  <base-url>/postorius/lists/list_abc/delete/ [1] : http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/views/list.py#L455 http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/views/list.py#L238 Similarly, At http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/templates/postorius/menu/list_nav.html#L18 ; why a *list_moderator* is allowed to view the *Mass Subscribe* link on the list navigation bar ? Though clicking it will give a *403* again as he has not permission for it. I think it should be *list_owner. At http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/templates/postorius/menu/list_nav.html#L18 ; why a *list_moderator* is allowed to view the *Mass Subscribe* option on the list navigation bar ? Though accessing it will give a *403* again as he has not permission for it. I think it should be *list_owner.
2015-04-13 19:52:48 Ankush Sharma branch linked lp:~black-perl/postorius/permissions-fix-in-list_nav.html
2015-04-13 19:56:19 Ankush Sharma description At http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/templates/postorius/menu/list_nav.html#L18 ; why a *list_moderator* is allowed to view the *Mass Subscribe* option on the list navigation bar ? Though accessing it will give a *403* again as he has not permission for it. I think it should be *list_owner. At http://bazaar.launchpad.net/~mailman-coders/postorius/trunk/view/head:/src/postorius/templates/postorius/menu/list_nav.html#L18 ; why a *list_moderator* is allowed to view the *Mass Subscribe* option on the list navigation bar ? Though accessing it will give a *403* again as he has not the permission for it. I think it should be *list_owner.
2015-04-13 19:56:22 Terri postorius: status In Progress Fix Committed