Anonymousにコメントを許可した
コメントを許可してみました。
ついでに
http://coreblog.org/howtos/nortification_howto_html
を見てmail hostも設定してみました。
mail hostを設定するとsecurityタグでanonymousに使用を許可しなければいけないようです。
(”Use mailhost services” ですね)
なんかちょっと怖い気もするけど、このサイト見てる人などほんのわずかなので気にしない。
と思ったけどやっぱ怖かったので、mail hostのsecurityタグで”Use mailhost services”は
"Authenticated"をチェック。
”addCommentHook”でproxyを”ahthenticated”に設定。
このほうが安心。
Will allowing "anonymous" to "Use mailhost services" not be a security problem? Will someone accessing the MailHost object via XML-RPC be able to send mails through the MailHost then?
Uh-mmm,
so after entry, I allowed "Authenticated" to "Use mailhost services", and allowd ”authenticated” on ”addCommentHook” proxy tab.
but I have no confidence in these security problem.
so I will post bloblems to COREBlog ML.
http://mail.webcore.co.jp/pipermail/coreblog/
Sorry, my English is very poor.
誰か助けて。^^;
I haven't yet been able to send mail through MailHost via XML-RPC (Zope says it cannot publish the requested resource bacuse it hasn't got a doc-string), nor am I sure that it is possible. However, I don't like the feeling of associating "Use mailhost services" with "anonymous", so I look forward to hearing what they have to say on the COREblog ML.
One of these days I should start learning Japanese... ;-)
I don't know about "XML-RPC" well. So I don't have any answer for your problems.
I'm sorry.
I posted these problems to COREBlog ML.
http://mail.webcore.co.jp/pipermail/coreblog/2004-March/000246.html
Someone can speak English.
I hope you join to the ML.
Hi, kas-san.
http://coreblog.org/howtos/nortification_howto_html
COREBlog's developer said "set Proxy roles for the script". and he(Ats) wrote again like above.
could it help you?
I tried comment on your blog
http://www.magnetic-ink.dk/14#comments
but you don't allow anonymous's comments.
So I wrote here.
If you want anonymous's comments, please read
http://coreblog.org/howtos/install_howto_html
Hi Shinobu-san :-)
Thanks for bugging me about the comments problem, it seems I didn't read the installation how-to closely enough. In fact I was going to ask about that in the COREblog forum on Orkut.
I have now corrected both the comments settings and the proxy rôle so I hope it works now. Thanks!
Cool to send me a trackback when you couldn't comment! ;-)
Trackbackを自分に打ってみる
はい、どうぞ
Using mailhost services
The COREblog Nortification (sic!) how-to describes in details how to set up hooks for sending notification email when a comment or a trackback is added to the blog. However, if Zope's default security settings are left unchanged, the following excep...