HomePhabricator

Add a policy restricting mailing list management

Description

Add a policy restricting mailing list management

Summary:
Fixes T7291. There are a class of spam/annoyance attacks here that we should be more strict about preventing, since you can add an individual's address as a mailing list.

This application is likely on the way out so I didn't bother trying to do per-object policies.

Test Plan: Set policy restrictively and could no longer create or edit mailing lists.

Reviewers: joshuaspence, btrahan

Reviewed By: btrahan

Subscribers: epriestley

Maniphest Tasks: T7291

Differential Revision: https://secure.phabricator.com/D11783

Details

Provenance
epriestleyAuthored on
epriestleyPushed on Feb 17 2015, 7:14 PM
Reviewer
btrahan
Differential Revision
D11783: Add a policy restricting mailing list management
Parents
rP82f47f968989: Legalpad - fix requires signature transaction from always being saved
Branches
Unknown
Tags
Unknown
Tasks
T7291: Lock down mailing lists