I can't find an answer to this most important question in the documentation.

Will Mailhandler accept an incoming email from any email address and post it as directed by the commands or does it check to see if the email address belongs to a registered user? If it does check, does it also apply that user's privileges?

Comments

moshe weitzman’s picture

moshe weitzman commented
Status: Active » Closed (fixed)

it checks for registered user and uses that user's perms.

davidteall’s picture

davidteall commented

it checks for registered user and uses that user's perms.

That's what I expected it to do - but it doesn't! I am using Mailhandler to post stories with a given taxonomy. It is working perfectly except for the fact that it will accept mail from any old address. I have checked the category permissions for anonymous user for the taxonomy terms I have used, and they are all set to Ignore/no tick.

My default commands are:

type: story
taxonomy: [Members only,MedNet Display]
status: 1
promote: 1
comment: 2

Any ideas?

moshe weitzman’s picture

moshe weitzman commented

are you restricting permissions based on taxonomy? ther eis no way in drupal to prevent *creation* of a node based taxonomy or anything other than permissions.

davidteall’s picture

davidteall commented

Some permissions are based on taxonomy, but on the main contrrol page, anonymouse user has no access to either create or edit stories. Surely that should prevent an unknown email address posting? If I send an email from an unknown address the post appears with the user name Anonymous.

echoeng’s picture

echoeng commented

This may be a bit off topic and I apologize if it is but has anyone used this with organic groups? I want to set the audience to a group. I can post to a forum fine but I'm not sure what the label would be (ie: tid for taxonomy, nid for node-- maybe gid?). Last time I tried I believe it ended up replacing my group altogether. A suggestion that would make this module better would be a check to make sure a node isn't written or and maybe an alert if this is the actual intention. I'm not sure how to fix the group to have a homepage again but good thing I'm just trying to figure this out before we actually switch over! (I'm thinking it might still be in mysql someplace..) Can anyone help me set the audience to a group? Thanks!