Excluding Cancel-Lock for certain users

[Julien ÉLIE]

Hi all,

> As an identity is always assigned by readers.conf, all posts are 
> considered to be sent by a known posting-account (the one appearing in 
> Injection-Info).
> Yet, it causes a problem with Cancel-Lock because some identities may be 
> shared between several persons.  Which means that any user with that 
> identity can cancel any other post from another user with the same 
> identity.

FYI, an "addcanlockuser" (defaulting to true) can now be added in access 
blocks to deactive the generation of a user Cancel-Lock for access 
blocks shared between several persons with the same assigned identity. 
Example:

     auth "example.com" {
         hosts: "*.example.com"
         auth: "ckpasswd -f <pathdb in inn.conf>/newsusers"
         default: "anonymous"
     }

     access regular {
         newsgroups: "*,!example.restricted.*"
         addcanlockuser: false
     }

     access full {
         users: "*,!anonymous"
         newsgroups: *
     }


Only an admin Cancel-Lock will be generated for anonymous users.

-- 
Julien ÉLIE

« Tant qu'il y a des marmites, il y a de l'espoir ! » (Astérix)