[Dovecot] Lock down Shared Mail Accounts?

Charles Marcus
Wed, 07 Mar 2012 13:32:32 -0000

On 3/5/2012 1:30 PM, Steve Campbell wrote:
 > I've been looking at some documentation on shared mail accounts.
 > But I'm getting mixed thoughts on how this can or should be done.

This brings up a question I have been meaning to ask.

One thing I want to do on my new converted system is to implement shared
mail. There will be two different scenarios - users sharing 'folders',
which looks to be fairly simple using virtual ACL files - but for the
other scenario, I'm not sure about a specific requirement we will have...

I want to give multiple people shared access to some actual accounts
with all of the special use folders, with the following requirements:

1. They can all read/reply to new messages as they come in,

2. They use shared \seen, \replied and \forwarded flags, so once someone
else has read/dealt with a message, the others see that,

3. When they reply to/forward a message, the Sent message gets saved to
that accounts 'Sent' folder,

4. They can *move* messages to other folders in that account (ie, 'file'
them), and last

(this is the tricky part)

5. No one other than a designated user or users (Master User(s)? Users
in a specified Group?) can delete any messages in this account, in any
of the folders.

These emails deal with financial transactions (AP and AR issues) and
Faxes, thus the requirement to not be able to delete them.

Can this be accomplished with the current state of things? Or would this
require some coding? If the latter, could it be done as a plug-in, or
would it require changes to the core code?

Thanks,

--

Best regards,

Charles