From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 32480 invoked by alias); 9 Apr 2014 12:53:31 -0000 Mailing-List: contact gdb-help@sourceware.org; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: gdb-owner@sourceware.org Received: (qmail 32471 invoked by uid 89); 9 Apr 2014 12:53:30 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-0.6 required=5.0 tests=AWL,BAYES_40 autolearn=ham version=3.3.2 X-HELO: rock.gnat.com Received: from rock.gnat.com (HELO rock.gnat.com) (205.232.38.15) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with (AES256-SHA encrypted) ESMTPS; Wed, 09 Apr 2014 12:53:29 +0000 Received: from localhost (localhost.localdomain [127.0.0.1]) by filtered-rock.gnat.com (Postfix) with ESMTP id 1FA8C11612E; Wed, 9 Apr 2014 08:53:28 -0400 (EDT) Received: from rock.gnat.com ([127.0.0.1]) by localhost (rock.gnat.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP id ElYDHX5BgIIQ; Wed, 9 Apr 2014 08:53:28 -0400 (EDT) Received: from joel.gnat.com (localhost.localdomain [127.0.0.1]) by rock.gnat.com (Postfix) with ESMTP id EC1EB11612D; Wed, 9 Apr 2014 08:53:27 -0400 (EDT) Received: by joel.gnat.com (Postfix, from userid 1000) id 39129E04CD; Wed, 9 Apr 2014 05:53:30 -0700 (PDT) Date: Wed, 09 Apr 2014 12:53:00 -0000 From: Joel Brobecker To: "Frank Ch. Eigler" Cc: Stan Shebs , gdb@sourceware.org Subject: Re: [GDB Wiki] Add editor privilege control Message-ID: <20140409125330.GA21704@adacore.com> References: <20140214030759.GC5485@adacore.com> <52FE61DD.6010000@earthlink.net> <20140303161227.GL4860@adacore.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20140303161227.GL4860@adacore.com> User-Agent: Mutt/1.5.21 (2010-09-15) X-SW-Source: 2014-04/txt/msg00027.txt.bz2 > > With the present scheme, effective spam fighting requires ongoing > > manual operations by you / tromey / whoever. > > > > Plus, the present scheme enables any spammer to create a moinmoin > > userid, create a junk page, then leave. The problem is that every > > such junk user bogs the wiki software down more and more: there are > > some 4000 now, with 10+/day new ones coming. (Over at gcc/glibc, > > before a cleanup, we had almost a hundred thousand (!), which was > > enough to cause cgi/http timeouts to valid users.) Cleaning *those* > > up is difficult without a whitelist such as the EditorGroup. > > That's really useful feedback, thank you! > > I also find it compelling that we have had a number of reverts done > the last few weeks, which is not huge, but larger than the twice-per- > quarter average we were counting on. Stan - we keep getting hit by spam on the wiki, and I really don't see a reason not to protect ourselves against it. Do you agree? Frank - Do you know what would need to be done at the technical level to protect ourselves? I would think we first create a EditorGroup page in the wiki, then add the corresponding group and its privileges in the wiki's configuration, right? Or can everything be done directly from the wiki? Anything else we should be doing? Thanks, -- Joel