when sending emails (e.g. to reviewers) in OMP, the principal contact is put into the ‘from’-variable, and both the principal contact and the logged-in user (that has actually sent the mail) are put in the ‘replyto’-variable.
We would prefer the logged-in user - and only him/her - to be in the ‘from’ and ‘reply to’-variable.
When looking at the code (MailTemplate.inc.php) there seems to be a difference between what you do and what the comment says. Or do I misunderstand you?
best,
Carola
// Default “From” to user if available, otherwise site/context principal contact
if ($user) {
$this->setReplyTo($user->getEmail(), $user->getFullName());
}
if (!$context) {
$site = $request->getSite();
$this->setFrom($site->getLocalizedContactEmail(), $site->getLocalizedContactName());
} else {
$this->setFrom($context->getSetting(‘contactEmail’), $context->getSetting(‘contactName’));
}
Unfortunately recent widespread adoption of Sender Protection Framework (SPF) rules by mail servers has made it tougher for OMP to send out emails that appear to be sent with a “From” address corresponding to the user who sent the email. To better conform with SPF we have instead set the “From” address to the primary contact, added an email header (generally “this is being sent on behalf of…”), and set the “Reply-to” address to the actual user’s email.
Regards,
Alec Smecher
Public Knowledge Project Team
There also is the canAdminister-check in UserGridHandler->sendEmail:
if ($userId !== null && !Validation::canAdminister($userId, $user->getId())) {
// We don’t have administrative rights over this user.
$json = new JSONMessage(false, __(‘grid.user.cannotAdminister’));
}
Is there is simple way to give all series editors the same administrative rights over other users that press managers have? Would this have other - unwanted - implications?
As I have already mentioned, the series editors’ rights are too restrictive for us, so we have to fiddle around with things I would prefer not to touch. Is there a chance that PKP adds flexibility to OMP that would make this unnecessary? We would be willing to give more thought to this topic, but we would need to have an idea of what is possible and what is not possible.
The key distinction between Editors/Managers, and sub/Series Editors, is that Series Editors do not have the opportunity to perform tasks outside of their sandbox. Editors/Managers can view and work with any submission in the press, but Series Editors need to be assigned and can only work on the things they’ve been specifically granted access to.
One common use for this is that a press might use the same individual as a reviewer or author and as a guest editor. They must therefore be prevented from accessing any of the information about blind reviews on submissions they aren’t explicitly granted access to.
This becomes tricky in some areas where even accessing certain aspects of user accounts could be used to gain access – for example, the Manager’s “Sign In As” feature, or editing user profiles.
Regards,
Alec Smecher
Public Knowledge Project Team