Re: [Dolibarr-dev] SPAM on Doliforge

[Destailleur Laurent]

It seems you can choose permissions "no access at all" or "read+write". But no way to choose "read only" for unregistered and "write" for registered (what we want). Can you confirm ?

2013/10/19 Florian Henry <address@hidden>

For admin doliforge user only https://doliforge.org/tracker/admin/?group_id=144&atid=246&func=permissions

Florian HENRY
address@hidden
+33 6 03 76 48 07
http://www.open-concept.pro
Twitter : @_Open_Concept_
Secretaire de l'association Dolibarr

Le 19/10/2013 14:25, Destailleur Laurent a écrit :

Restricting bug reporting without doliforge account is not necessarly a bad idea.

It needs more time for reporter, but it save a lot of time of core team. Because the bottleneck is always the coreteam, and not reporting end users, I think it is better. 

Also with dolibarr success growing, spam will also grow and will soon become uncontrollable.

However i did not find how to restrict this to non registered users. Can you point me on path to go onto admin page to do this ?

2013/10/19 Florian Henry <address@hidden>

Hi all,

Each time I see a spam message into the forge, i delete it (ak this morning), the one that over come more often is "led" something. Look like retweet of spam bot. Sure it's not good practice, and didn't avoid spam mail...

For exemple  on

Dolibarr ERP & CRM » Bugs » bug #915

:

led floodlights 2013-10-16 17:04

Man, you turn on any news station and there's a balanced panel on the post-debate. You turn to FOX, and you would think Romney's President led floodlights http://www.fledlights.com/led_flood_light

led panel lights 2013-10-16 13:03

RT @iUglyTruth: My phone is my alarm clock, flashlight, calculator, music player, and camera. led panel lights http://www.fledlights.com/led_panel

led recessed lights 2013-10-14 05:08

RT @disneywords: I don’t want to grow up. –Wendy (Peter Pan) led recessed lights http://www.fledlights.com/led_Downlights

I've first notice this problem with agefodd project and I restrict bugs and task creation or update on registrered user only on this project, and since then, the spam bot start to spam bug and task of dolibarr project...

The fact is this is a non registered user, but if we restrict acces to only registered user it will be impossible to log a bug with doliforge account...

Regards

Florian HENRY
address@hidden
+33 6 03 76 48 07
http://www.open-concept.pro
Twitter : @_Open_Concept_
Secretaire de l'association Dolibarr

Le 19/10/2013 10:59, Marcos García a écrit :

I don't mean that kind of message, I mean bug and task spam comments made by Anonymous users... 

For me, as Doliforge is mostly used by Dolibarr developers it does make sense to set permissions to post only for registered users...

If Tuleap does not allow this... I think you should consider other bug-tracking options...

 

Marcos García

address@hidden

2013/10/19 Jean-François Ferry <address@hidden>

Hi Marco (& all),

Le 19/10/2013 09:45, Marcos García a écrit :

Hi,

Are you going to do something about the massive SPAM everyone is receiving from Doliforge? Like... for example... upgrading to the latest version of Tuleap?

Do you mean this kind of message ? -> https://doliforge.org/forum/message.php?msg_id=388

Upgrade will not change anything (even if it will be done soon). Accounts are created with reason 'work with dolibarr' but they use forums to spam :( We need to block them manually.

For publicly viewable email addresses it's possible to close doliforge to all users who don't have an account. Register would be required event to read a simple announcement of a project.
We discussed this in the fundation board, I ask everyone : what do you think of this ?

Regards

Regards,

 

Marcos García

address@hidden

_______________________________________________
Dolibarr-dev mailing list
address@hidden
https://lists.nongnu.org/mailman/listinfo/dolibarr-dev

_______________________________________________
Dolibarr-dev mailing list
address@hidden
https://lists.nongnu.org/mailman/listinfo/dolibarr-dev

_______________________________________________
Dolibarr-dev mailing list
address@hidden
https://lists.nongnu.org/mailman/listinfo/dolibarr-dev

_______________________________________________
Dolibarr-dev mailing list
address@hidden
https://lists.nongnu.org/mailman/listinfo/dolibarr-dev

_______________________________________________
Dolibarr-dev mailing list
address@hidden
https://lists.nongnu.org/mailman/listinfo/dolibarr-dev

_______________________________________________
Dolibarr-dev mailing list
address@hidden
https://lists.nongnu.org/mailman/listinfo/dolibarr-dev