On 11/3/20 3:15 AM, Stephen J. Turnbull wrote:
Allan Hansen writes:
If he/she has never created an account, then I see no problem cleaning up the system when the user deletes the last subscription,
Without an account (ie, a User object), the user can't authenticate themselves as owner of the subscription, and therefore can't delete any subscriptions. What scenario are you thinking of here?
Mailman-users mailing list -- mailman-users@mailman3.org To unsubscribe send an email to mailman-users-leave@mailman3.org https://lists.mailman3.org/mailman3/lists/mailman-users.mailman3.org/
If you mean if they don't have a Django user account, they can't unsubscribe? I think that is true if they are wanting to unsubscribe via the web interface. But sending an email to listname-unsubscribe@listdomain allows them to unsubscribe without such user authentication. Isn't that correct?
My intent in our changes is to give the list owner and member exactly what they expect: when they explicitly remove a subscription and/or user profile, that they expect their data to be totally removed. I can easily picture a scenario where an older list has a number of list members move to on to other things in life and even abandon their email accounts totally. In those cases it is imperative that those list addresses are removed either via bounce processing or list owner intervention and that no legacy data on such members remain.
--
Brian Carpenter Harmonylists.com Emwd.com