Mirrored mailing list is rejecting registered forum users

[JonahAragon1 (Jonah Aragon)]

I have a category with the “Category mirrors a mailing list” option enabled, and the category’s permissions set to “Everyone: See” (because I only want people to post to this category via email and not from the forum interface).

However, this causes mailing list emails from users who are also registered to the forum to be rejected with an “Access Denied” error. If I change the category permissions to give them Reply/Create then it works as expected, but that would allow posting from the forum and I want this to be a read-only mirror.

My understanding is that the “Category mirrors a mailing list” option should allow all users to post to this category via email regardless of permissions, so this seems like a bug.

[Moin]

There is a similar topic about email-in to restricted categories which also only works for staged users.

Category not accepting "anonymous email" from known users

I’m a bit confused by the bug vs. intended behaviour debate. The way I have interpreted it is that for security reasons, creating new topics via email is not permitted if the email address matches an existing non-staged user; this is because email addresses can be spoofed and therefore users could be impersonated. Replies are presumably acceptable because the address includes the reply key, demonstrating that the sender was the recipient of the notification email and is therefore likely the re…

[JonahAragon1 (Jonah Aragon)]

I think that’s similar or the same problem, but my scenario should be more straightforward to fix because Discourse doesn’t have to do any validation like what is being debated in that thread. The mailing list mirroring mode can simply mirror the external mailing list, and any logic in email handling would get delegated to that system.