I have a problem with dovecot-acl. Some of our users need to use the same
Mailbox with all folders: Inbox (with subfolders), Outbox, Send and Deleted,
(some users need in full righs, some - readonly) so I choosed Symlinking
mailboxes and tried to use dovecot-acl file.
cat dovecot-acl:
user=t1 lrwsti
user=operolegs lrwsti
user=operantona lrwsti
user=operdss lr
User operdss have lrwsti rights in this shared mailbox unstead of lr! But if I
comment out other users in the dovecot-acl:
#user=t1 lrwsti
#user=operolegs lrwsti
#user=operantona lrwsti
user=operdss lr
User operdss have lr rights. Whats wrong?
It seems, that dovecot-acl is working only for one user.
How can I fix it?
==Here is my configs.
imap:~# dovecot -n
# 1.2.13: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.26-2-686 i686 Debian 5.0.6
log_timestamp: %Y-%m-%d %H:%M:%S
disable_plaintext_auth: no
login_dir: /var/run/dovecot/login
login_executable: /usr/lib/dovecot/imap-login
mail_privileged_group: mail
mbox_write_locks: fcntl dotlock
mail_plugins: acl imap_acl
auth default:
passdb:
driver: pam
userdb:
driver: passwd
plugin:
acl: vfile
----
imap:~# ls -l /home/t1/Maildir
lrwxrwxrwx 1 root root 21 2010-09-22 16:03 /home/t1/Maildir ->
/var/mail/720/Maildir
imap:~# ls -l /home/operolegs/Maildir
lrwxrwxrwx 1 root root 21 2010-09-23 16:00 /home/operolegs/Maildir ->
/var/mail/720/Maildir
imap:~# ls -l /home/operantona/Maildir
lrwxrwxrwx 1 root root 21 2010-09-23 16:00 /home/operantona/Maildir ->
/var/mail/720/Maildir
imap:~# ls -l /home/operdss/Maildir
lrwxrwxrwx 1 root root 16 2010-09-28 16:32 /home/operdss/Maildir ->
/home/t1/Maildir
---
imap:/home/t1/Maildir# ls -l
total 112
drwxrws--- 2 t1 mshare 4096 2010-09-27 10:46 cur
-rw-rw---- 1 t1 mshare 99 2010-09-29 15:56 dovecot-acl
-rw-rw---- 1 operdss mshare 312 2010-09-29 16:43 dovecot-acl-list
-rw-rw---- 1 operolegs mshare 1144 2010-09-24 12:16 dovecot.index
-rw-rw---- 1 t1 mshare 41984 2010-09-28 16:39 dovecot.index.cache
-rw-rw---- 1 t1 mshare 25068 2010-09-28 16:38 dovecot.index.log
-rw-rw---- 1 operantona mshare 17 2010-09-23 16:41 dovecot-keywords
-rw-rw---- 1 operantona mshare 1941 2010-09-27 10:46 dovecot-uidlist
-rw-rw---- 1 t1 mshare 8 2010-09-29 16:43 dovecot-uidvalidity
-rw-rw---- 1 t1 mshare 0 2010-09-22 10:54
dovecot-uidvalidity.4c99a82f
drwxrws--- 2 t1 mshare 4096 2010-09-27 10:46 new
-rw-rw---- 1 operdss mshare 327 2010-09-29 16:43 subscriptions
drwxrws--- 2 t1 mshare 4096 2010-09-27 10:46 tmp
-----
imap:/home/t1/Maildir# dpkg --list|grep dovecot
ii dovecot-common 1:1.2.13-1~bpo50+1
secure mail server that supports mbox and maildir mailboxes
ii dovecot-imapd 1:1.2.13-1~bpo50+1
secure IMAP server that supports mbox and maildir mailboxes
dovecot packages - from backports
---
Linux: Debian Lenny up2date
On Wed, 2010-09-29 at 23:26 +0400, dss wrote:> I have a problem with dovecot-acl. Some of our users need to use the > same Mailbox with all folders: Inbox (with subfolders), Outbox, Send > and Deleted, (some users need in full righs, some - readonly) so I > choosed Symlinking mailboxes and tried to use dovecot-acl file.This is only a problem with symlinked mailboxes, because Dovecot thinks you own the mailbox and uses "allow everything" as the default ACL.> cat dovecot-acl: > user=t1 lrwsti > user=operolegs lrwsti > user=operantona lrwsti > user=operdss lr > > User operdss have lrwsti rights in this shared mailbox unstead of lr! But if I comment out other users in the dovecot-acl: > > #user=t1 lrwsti > #user=operolegs lrwsti > #user=operantona lrwsti > user=operdss lrI'll try to get this fixed properly tomorrow, but for now you can work around it by first removing all rights from owner: owner user=t1 ... user=...