List Manager
The list manager allows users self-service signups to suported lists. The list manager has two interaction points
- The email api
- The webapp displays a "subscribe / unsubscribe" button for lists using this feature.
The manager edits recipients-lists directly, there is no difference between a manual subscription and one created via self-service.
Security implications
Any user that has an account can use the web-based subscription manager and any user on the allowlist may use the email api.
Marking a list as editable means anyone with access is potentially recieving the email. Keep this in mind when sharing sensitive information or information only meant for sub-groups.
It is possible to disable allowlist-checks on a per-list or global level. This is very dangerous and rarely a smart move. this allows you to run newsletters. Make sure your list security is configured correctly before touching any allowlist related settings.