dovecot - Jun 2009 - Dovecot v1.2 ACL shared-boxes users in SQL, how to remove entries?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

I noticed that entries added to the ACL dict are not removed, when an user 
no longer has explicit ACLs to another user, e.g.:

[at the beginning no ACLs for "user"]
1 login testuser pwd
2 setacl INBOX user lp
3 deleteacl INBOX user

Although "user" has no ACLs of mailfolders of "testuser",
the
user-testuser relation is still in the DB and upon login of user the ACLs 
in user's Maildir is consulted.

Bye,

- -- 
Steffen Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iQEVAwUBSkN+VHWSIuGy1ktrAQLR8ggAjmyUvByjz/acGoQzXahh4dr4/+FT9bx+
FU9ze1dK9ZgFWW+SkBrgmMW6ayu77rHG3Qp66ONAgJFRmBv+w6G8IJA8yueD/8z4
ZsGN1ekQxBwqAJWnGyMAVNiksRwE0SFUNAoTIKfjOLE21fQhiI6aGpdFWqP89/Vb
jITOQ0+woAm2g2DvCBEMRXRZoFZGO8UCX6RCXaaqGV0c7mEkwRn/cSB/EimTTHr1
lkGXtjpJJ7u9d5apSK2TX5FFKPmKgU9G4rCzMvG9sNB808dwvtnaNBCii3btlxRT
5UBIji4PBx7zs6APctIjfsuMg5yiMg92ip9SBMYnBZ2BmmCMzDu9iA==gAST
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 25 Jun 2009, Steffen Kaiser wrote:
> I noticed that entries added to the ACL dict are not removed, when an user
> no longer has explicit ACLs to another user, e.g.:
>
> [at the beginning no ACLs for "user"]
> 1 login testuser pwd
> 2 setacl INBOX user lp
> 3 deleteacl INBOX user
>
> Although "user" has no ACLs of mailfolders of
"testuser", the
> user-testuser relation is still in the DB and upon login of user the ACLs
> in user's Maildir is consulted.
Can/should remove Dovecot the dict entry, if "user" logins and Dovecot
detects that there are no ACLs on mailfolders of "testuser" for
"user"?

Bye,

- -- 
Steffen Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iQEVAwUBSkOr53WSIuGy1ktrAQLFqwf/cgjgbEAuVqgCkyjcVOiPMPkVkQ7dn63Z
Rd9FqPKPSUd8T3fR9uRwfOCz6KGUpESX9TqzFxuEYVbooTMZijQQ9p1lL1sFY7dD
9ScFaZoGzmV8QyZEYOIzWyU29GztGUqfMbLld6WI2nSsLuxHWryx6J/Gq44jAiVp
WVUK8efUtNqubYre770gO5NrrzFNnJEgnjIvhyBZKikw8GnY10MwFfDP/+VGMmUZ
F4sbFoZwOH1WfYAZtph7FhPF7uEMcHtT/9Uez3egV+v1sBzP59EtErUh0a9Vrjef
l76OyYpzuXtDGar/e1suARnAXt9Q/vuvGygvtagFu2xqRb3ZEoE6VQ==rgCG
-----END PGP SIGNATURE-----

Steffen Kaiser schrieb:
> Hello,
> 
> I noticed that entries added to the ACL dict are not removed, when an
> user no longer has explicit ACLs to another user, e.g.:
> 
> [at the beginning no ACLs for "user"]
> 1 login testuser pwd
> 2 setacl INBOX user lp
> 3 deleteacl INBOX user
> 
> Although "user" has no ACLs of mailfolders of
"testuser", the
> user-testuser relation is still in the DB and upon login of user the
> ACLs in user's Maildir is consulted.
> 
> Bye,
> 
> -- Steffen Kaiser
Hi Steffen, did you use a setup like described by example
acl sql

http://wiki.dovecot.org/SharedMailboxes/Shared

with mysql?

this is what i will need
but couldnt found any time yet to test it

-- 
Best Regards

MfG Robert Schetterer

Germany/Munich/Bavaria

On Thu, 2009-06-25 at 15:40 +0200, Steffen Kaiser wrote:
> I noticed that entries added to the ACL dict are not removed, when an user 
> no longer has explicit ACLs to another user, e.g.:
> 
> [at the beginning no ACLs for "user"]
> 1 login testuser pwd
> 2 setacl INBOX user lp
> 3 deleteacl INBOX user
> 
> Although "user" has no ACLs of mailfolders of
"testuser", the
> user-testuser relation is still in the DB and upon login of user the ACLs 
> in user's Maildir is consulted.
Well, yeah, looks like it's not too easy to detect in the code. I think
I won't fix it before v1.2.0.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20090627/087fd5b4/attachment-0002.bin>