Hi,

I am going to start paying more attention to this module (and get on CVS) in the next few days after finishing some other stuff. I am eager to have the functionality on my site.

In the meantime, I wanted to float a suggestion - that group owners be able to turn on/off this feature when editing their group, but that the email address setting not be a configurable field for ordinary group owners. The current UI is going to be confusing for my use case, where most group owners are not admins of the site and really shouldn't be allowed to change the email address. For simplicity's sake, it should always be the name of the group (eg Group Name becomes group_name@foo.com) or down the road be editable by the site admin but not by the group owner.

Another option that I think may be needed for the group owner to be able to set is some sort of simple password, to prevent spoofing email addresses to masquerade as existing group members. This might happen in some rare circumstances - may need testing to see if it's really needed.

I hope this makes sense.

Thanks!

Tobias

Comments

arthurf’s picture

arthurf commented

Hi-

A few thoughts: on the permissions to edit the mail field- my thought was that cck field permissions should handle this. I haven't actually tried it, but I prefer to delegate to the existing solutions rather than creating new ones- can you give that a try and see if it meets your needs?

Asper email address- by default, mail2og does create the email address as group_name, so this should be taken care of. I'm not sure how the default would work with cck field permissions.

Asper security concerns- mailhandler takes care of the authentication for us- see its authentication system- and there are some checks in mail2og to try to make sure that the user who is sending can- see mail2og_mailhandler() in the mail2og.module

let me know how this works for you
a.

tobias’s picture

tobias commented

Hi Arthur,

Thanks for the quick reply.

1) I am not sure CCK Permissions works here. When I don't have permission to edit the mail2og CCK field, I don't get a comfirmation like this upon saving: "Automatically generated a email address: test_group_for_tobias@kabissa.org for this group." When I do have permission to edit the mail2og cck field I do. Perhaps this doesn't matter.

2) How and when does mail2og create the email address? When the group is saved (ie above)? If so, then I'm not sure this is working. This raises another question: what happens to existing groups that have not been edited since mail2og was installed and configured?

3) security concerns - I agree with you. Let's let mailhandler take care of this and see what happens. However, it would be nice to be able to let group owners limit who can post by email (eg group managers only or all group members), require a password or turn on/off mail2og to give them an added level of control over their own group.

Thanks!

Tobias

jludwig’s picture

jludwig commented
Issue summary: View changes
Status: Active » Closed (outdated)

I wasn't able to get CCK permissions doesn't work with this, but at this time this module isn't taking new features. Drupal 6 is no longer supported.