[MAILMAN] Still has anonymous user

See this thread; still behaves this way in the current version


Closed (works as designed)


That anonymous user is intentional and required - it is an internal user used by Webmin for access to certain modules and pages without needing to login.

Anonymous user on my system is allowed to access the "Virtualmin Mailman Mailing Lists". :O

No, the anonymous user only really has access to a subset of features in that module.

Specifically, it is used to provide access to URLs like https://yourserver:10000/virtualmin-mailman/subscribe.cgi , without needing to login to Virtualmin. This then calls the Mailman CGI subscribe CGI script with the correct permissions.

Are you seeing any cases in which this anonymous user can be used to access features of Virtualmin that a user would normally be denied from?