dovecot - Sep 2007 - ACL question

Does ACL's apply to all subfolders?  For instance, if I create a 
dovecot-acl in a Maildir/, does it apply only to the INBOX or does it 
apply to all subfolders as well?

On Thu, 2007-09-27 at 11:05 -0400, Cory Coager wrote:
> Does ACL's apply to all subfolders?  For instance, if I create a 
> dovecot-acl in a Maildir/, does it apply only to the INBOX or does it 
> apply to all subfolders as well?
There is no inheritance currently, so that would apply only to INBOX.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20070930/e3578ab6/attachment-0002.bin>

Timo Sirainen wrote:
> On Thu, 2007-09-27 at 11:05 -0400, Cory Coager wrote:
>   
>> Does ACL's apply to all subfolders?  For instance, if I create a 
>> dovecot-acl in a Maildir/, does it apply only to the INBOX or does it 
>> apply to all subfolders as well?
>>     
>
> There is no inheritance currently, so that would apply only to INBOX.
>
>   
Hmm, I did some testing on this and my results were the opposite.  I
created a namespace to someone else's Maildir home and configured the
dovecot-acl in this folder only.  From my username, with read
permissions, I was able to see all of their folders.  From another user,
with no permissions, I wasn't able to subscribe to any of their folders,
none were visible.

Now don't get me wrong, this is actually what I'm looking for because
its less maintenance for me.  However, why am I getting different
results?  I'm just worried about possible security issue if I don't
configure the permissions for each folder.

The structure looks like this:
/home/vmail/domain/user/.maildir/dovecot-acl
/home/vmail/domain/user/.maildir/.Drafts
/home/vmail/domain/user/.maildir/.Sent
/home/vmail/domain/user/.maildir/.Trash


~Cory Coager