diff roundup/mailgw.py @ 3276:3124e578db02

Email fixes: - fix checking of "Email Access" for Anonymous email registration [SF#177057] - disable "Email Access" for Anonymous by default to stop spam regsitering users on public trackers - doc fixes / additions too
author Richard Jones <richard@users.sourceforge.net>
date Wed, 13 Apr 2005 03:38:23 +0000
parents 7faae85e1e33
children a23863a95326
line wrap: on
line diff
--- a/roundup/mailgw.py	Thu Apr 07 07:38:29 2005 +0000
+++ b/roundup/mailgw.py	Wed Apr 13 03:38:23 2005 +0000
@@ -72,7 +72,7 @@
 an exception, the original message is bounced back to the sender with the
 explanatory message given in the exception.
 
-$Id: mailgw.py,v 1.163 2005-02-15 23:45:28 richard Exp $
+$Id: mailgw.py,v 1.164 2005-04-13 03:38:22 richard Exp $
 """
 __docformat__ = 'restructuredtext'
 
@@ -768,7 +768,8 @@
         # Don't create users if anonymous isn't allowed to register
         create = 1
         anonid = self.db.user.lookup('anonymous')
-        if not self.db.security.hasPermission('Create', anonid, 'user'):
+        if not (self.db.security.hasPermission('Create', anonid, 'user')
+                and self.db.security.hasPermission('Email Access', anonid)):
             create = 0
 
         # ok, now figure out who the author is - create a new user if the

Roundup Issue Tracker: http://roundup-tracker.org/