On 3/5/2012 1:30 PM, Steve Campbell wrote: > I've been looking at some documentation on shared mail accounts. > But I'm getting mixed thoughts on how this can or should be done. This brings up a question I have been meaning to ask. One thing I want to do on my new converted system is to implement shared mail. There will be two different scenarios - users sharing 'folders', which looks to be fairly simple using virtual ACL files - but for the other scenario, I'm not sure about a specific requirement we will have... I want to give multiple people shared access to some actual accounts with all of the special use folders, with the following requirements: 1. They can all read/reply to new messages as they come in, 2. They use shared \seen, \replied and \forwarded flags, so once someone else has read/dealt with a message, the others see that, 3. When they reply to/forward a message, the Sent message gets saved to that accounts 'Sent' folder, 4. They can *move* messages to other folders in that account (ie, 'file' them), and last (this is the tricky part) 5. No one other than a designated user or users (Master User(s)? Users in a specified Group?) can delete any messages in this account, in any of the folders. These emails deal with financial transactions (AP and AR issues) and Faxes, thus the requirement to not be able to delete them. Can this be accomplished with the current state of things? Or would this require some coding? If the latter, could it be done as a plug-in, or would it require changes to the core code? Thanks, -- Best regards, Charles
> I want to give multiple people shared access to some actual accounts > with all of the special use folders, with the following requirements:I have done this (unsatisfactorarily) by making it a normal mail account with normal login credentials. Add it like any other mail account. It then satisfies all your requirements, although: behind a nat, on thunderbird and with condstore, I sometimes see read/unread get out of sync... Believed to be a thunderbird bug, but unsure. Easy to resync> 5. No one other than a designated user or users (Master User(s)? Users > in a specified Group?) can delete any messages in this account, in any > of the folders.Have them delivered with only read permissions on the physical files? (Bet that doesn't work very well in practice or other than maildir...) Interested to hear proper answers... Ed W
On 3/7/2012 6:32 AM, Charles Marcus wrote:> 5. No one other than a designated user or users (Master User(s)? Users > in a specified Group?) can delete any messages in this account, in any > of the folders.If you are using ACLs, just don't give them the delete permission? But I guess now that I am thinking about it as I write, you did want them to be able to move the messages (which is really a copy + delete). So... maybe not.
On 7.3.2012, at 15.32, Charles Marcus wrote:> 4. They can *move* messages to other folders in that account (ie, 'file' them), and last > > (this is the tricky part) > > 5. No one other than a designated user or users (Master User(s)? Users in a specified Group?) can delete any messages in this account, in any of the folders.There is unfortunately no "default ACL" feature currently. Although you could somewhat easily add an ugly hack to the code for that. And I guess it wouldn't be difficult to implement it, maybe by reading it from $mail_root/dovecot-acl-default file or something.. So without code changes you could: - create all of the necessary folders - set such ACLs that user can't create any more folders - disallow expunging in all folders