[Dovecot] Lock down Shared Mail Accounts?

Timo Sirainen
Sat, 10 Mar 2012 16:50:15 -0000

On 7.3.2012, at 15.32, Charles Marcus wrote:

> 4. They can *move* messages to other folders in that account (ie,
'file' them), and last
>
> (this is the tricky part)
>
> 5. No one other than a designated user or users (Master User(s)? Users in a
specified Group?) can delete any messages in this account, in any of the
folders.

There is unfortunately no "default ACL" feature currently. Although
you could somewhat easily add an ugly hack to the code for that. And I guess it
wouldn't be difficult to implement it, maybe by reading it from
$mail_root/dovecot-acl-default file or something..

So without code changes you could:

 - create all of the necessary folders
 - set such ACLs that user can't create any more folders
 - disallow expunging in all folders