[MAILMAN] Still has anonymous user

Submitted by jasongayson on Thu, 02/07/2013 - 20:51

See this thread; still behaves this way in the current version

http://www.virtualmin.com/node/17312

Status: 
Closed (works as designed)

Comments

Submitted by JamieCameron on Thu, 02/07/2013 - 21:47

That anonymous user is intentional and required - it is an internal user used by Webmin for access to certain modules and pages without needing to login.

Submitted by aitte on Sat, 02/09/2013 - 19:53

Anonymous user on my system is allowed to access the "Virtualmin Mailman Mailing Lists". :O

Submitted by JamieCameron on Sat, 02/09/2013 - 19:58

No, the anonymous user only really has access to a subset of features in that module.

Specifically, it is used to provide access to URLs like https://yourserver:10000/virtualmin-mailman/subscribe.cgi , without needing to login to Virtualmin. This then calls the Mailman CGI subscribe CGI script with the correct permissions.

Are you seeing any cases in which this anonymous user can be used to access features of Virtualmin that a user would normally be denied from?