If on or more lists are set and user is not allowed to access the mailman form by the "access mailman_manager" acl, then he can anyway access an empty form and send a subscription mail.
The patch fixes this issue.

CommentFileSizeAuthor
noaccess.diff536 bytessamuelet

Comments

arturoramos’s picture

Status: Reviewed & tested by the community » Closed (fixed)

Patch committed in 5.x-1.0 release