71e1911dfc
Summary: We have a debug interface for sending various sorts of email, but normal users don't really need to use it. In particular, they can: - Send arbitrary email to other users; - Discover other users' email addresses fairly easily (CC everyone); - Send arbitrary email to arbitrary addresses in conjunction with "Mailing Lists" In fact, normal users don't need to get to the MetaMTA web interface at all and it has some somewhat-sensitive things beacuse it has a lot of detailed information about mail. For instance, users can look at mail records to discover things like password reset links and per-user object email addresses. We should smooth out the UI here but I think I can do something about T21 fairly soon and cover it then. Test Plan: Went to /mail/ with a non-admin, got 404'd. Went to /mail/ with an admin, everything works, got a red admin header. Reviewers: jungejason, btrahan Reviewed By: btrahan CC: aran, btrahan, jungejason Maniphest Tasks: T718 Differential Revision: https://secure.phabricator.com/D1292
Phabricator is a open source collection of web applications which make it easier to write, review, and share source code. Phabricator was developed at Facebook. This is an early release. It's pretty high-quality and usable, but under active development so things may change quickly. You can learn more about the project and find links to documentation and resources at: http://phabricator.org/ LICENSE Phabricator is released under the Apache 2.0 license except as otherwise noted. http://www.apache.org/licenses/LICENSE-2.0