Displaying 20 results from an estimated 1000 matches similar to: "ACL changes not respected by already loged in clients"
2009 Mar 04
2
ACLs are applied recursively to sub mailboxes
Hi *,
The problem is most noticeable when a user shares his INBOX[0][1] with
others:
User A sets his INBOX acls to "eilprwtsd"
Now User B can see _all_ sub mailboxes and sub sub [...] mailboxes and
their contents of User A:
User A:
g getacl INBOX
* ACL "INBOX" "A at example.com" akxeilprwtscd "B at example.com" eilprwtsd "A at example.com"
2009 Feb 18
1
v1.2 can't set ACL to empty string
Hi *,
according to RfC4314 the rights argument to the setacl command might be
an empty string ("zero right characters"):
The third argument is a string containing an optional plus ("+") or
minus ("-") prefix, followed by zero or more rights characters.
existing clients (horde in particular) actually use this to remove all
rights from an user.
Currently
2010 Jun 18
1
ACL, forced INBOX subscription
Hi,
I've two accounts 'matthias' and 'mailverwalter'. Mailverwalter want's to
share the Spam folder:
This is the situation in the beginning:
(matthias)
a LIST (SUBSCRIBED) "common." "*"
a OK List completed.
a LIST (SUBSCRIBED) "common.mailverwalter" "*"
a OK List completed.
(mailverwalter)
a GETACL Spam
* ACL "Spam"
2017 Jan 02
0
differential SETACL silently fails if no vfile exists
In version 2.2.13, with `acl = vfile`, setting a differential ACL
permission doesn't work if there are no permissions set yet. Example
IMAP log:
b1 GETACL test
* ACL test valodim lrwstipekxacd
b1 OK Getacl completed.
b2 SETACL test valodim -l
b2 OK Setacl complete.
b3 GETACL test
* ACL test valodim lrwstipekxacd
b3 OK Getacl completed.
My expectation was that the file would be created with
2009 Mar 04
2
v1.2: can't access other users shared INBOX
Hi *,
when a user A shares his INBOX with another user B, the user B can't
access its content:
User A:
g getacl INBOX
* ACL INBOX A at example.com lrswipkxtecda B at example.com lrswipkxtecd
g OK Completed
User B:
l list "" "*"
* LIST (\Noselect \HasChildren) "/" "user"
* LIST (\Noselect \HasChildren) "/" "user/A at
2012 Aug 29
1
ACL MySQL dict: to_user==from_user entries
Hi!
We run dovecot 2.1.6 with ACL support and MySQL dict for
shared/shared-boxes/user/$to/$from.
When a user does a SETACL (via IMAP) to himself he is added as $to and
$from to the MySQL dict. Se for example this IMAP conversation:
5 GETACL INBOX
* ACL "INBOX" "user at domain" lrwstipekxacd
5 OK Getacl completed.
6 SETACL INBOX user at domain lrwstipekxacd
6 OK Setacl
2009 Jun 15
2
Dovecot v1.2 assert() in ACL
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hello,
using Dovecot v1.2 changeset: 9126:b745911012bb
ACL config:
acl = vfile
# To let users LIST mailboxes shared by other users, Dovecot needs a
# shared mailbox dictionary. For example:
acl_shared_dict = file:/var/cache/dovecot/shared-mailboxes
telnet localhost imap
0 login ....
1 getacl Sent
* ACL "Sent"
2011 Jun 27
1
ACLs: Group ACL adds empty ACL for user of same name, why?
I'm playing around with ACLs, Groups and SOGo on Debian Stable, Dovecot
1.2.15.
If I set an ACL for a group 'developers':
6 setacl "INBOX.Trash" "$developers" "lrsw"
6 OK Setacl complete.
The dovecot-acl file for INBOX.Trash then contains a group setting for the
group, and a user setting for a user of the same name, giving it no
permissions.
2015 Feb 05
0
Bug when using METADATA and ACLs
Hi,
I'm trying to use the current version of dovecot as the IMAP server for Kolab
and things seem to be working more or less OK, but while working on it I've
found a dovecot bug that can probably be fixed quickly by someone familiar
with the code.
I've found the problem using shared folders, but it is related to ACLs and
METADATA.
The problem appears when a user only has the
2018 Aug 07
2
limit sharing ability to certain users
still the same?
root at buserver:/etc/dovecot# doveadm user test2 at onnet.ch
field valueuserdb lookup: user test2 at onnet.ch doesn't exist
relevant config output from doveconf -n
userdb {
args = /etc/dovecot/dovecot-ldap.conf
driver = ldap
result_success = continue-ok
}
userdb {
args = username_format=%Lu /etc/dovecot/share.passwd
driver = passwd-file
result_failure =
2018 Aug 08
0
limit sharing ability to certain users
Okay, this seems to be due to the fact that the option ?use_globals_only" is supported only in v2.2.31+
We are on Debian jessie with dovecot v2.2.13 ? even an upgrade to current stable stretch won?t help (dovecot v2.2.27). So we will wait until the packages find their way into the repository.
thanks anyway
> On 7 Aug 2018, at 13:00, Simeon Ott <simeon.ott at onnet.ch> wrote:
>
2013 Feb 26
1
2.2.rc2: problem with acl_shared_dict
Hello,
2.2.rc2, configuration as before:
acl_shared_dict=file:...
The contents of this file is used for e.g. LISTing shared mailboxes.
But even with file and directory beeing world writable, it's not written
into on SETACL commands.
Instead, at least sometimes (it seems to make a difference if GETACL is
used before in the session) the imap process crashes on SETACL or DELETEACL.
Feb 26
2014 Jan 06
1
acl, shared folders
Hi list,
?
After spending quite some time to figure out how users can share folders I now hope someone of you could help me out. I am quite sure its just a stupid mistake/misunderstanding?... I am using Ubuntu 12.04 LTS with the shipped dovecot 2.0.19
When I login via telnet as user1 I get the following:
1 create folder1
1 OK Create completed.
2 setacl folder1 user2 rli
2 OK Setacl complete.
3
2018 Aug 08
2
limit sharing ability to certain users
http://repo.dovecot.org/ <http://repo.dovecot.org/>
Sami
> On 8 Aug 2018, at 10.27, Simeon Ott <simeon.ott at onnet.ch> wrote:
>
> Okay, this seems to be due to the fact that the option ?use_globals_only" is supported only in v2.2.31+
> We are on Debian jessie with dovecot v2.2.13 ? even an upgrade to current stable stretch won?t help (dovecot v2.2.27). So we will
2009 Jan 15
2
get username of logged in user
Hello,
can I anywhere get the name of the currently logged in user?
I'm still implementing a custom ACL plugin (IMAP commands MYRIGHTS, GETACL, SETACL, DELETEACL), and for some functions (for example storing the current folder's ACL in combination with this username) I need to obtain the currently logged in IMAP user.
Is this possible? If yes - how?
Thanks in advance.
Best regards
2008 Nov 16
8
IMAP ACLs and global ACLs in v1.2
I just committed code for IMAP ACL support based on the code from Kolab
people. I did quite large changes though.
I also changed how global ACLs are handled. Previously local ACLs could
override global ACLs, but now that users are able to modify the ACLs I
think it should be the other way around. From what I've heard global
ACLs are typically added for things like 1) disallowing user from
2010 Oct 11
2
Shared folders, please help.!
Hello all,
First of all sorry for this, it has been discussed many times, but i can
not make it work.
I tried for a long time now.
I do something wrong, but i do not know what.
First of all, i have virtual users, with virtual domains.
Mail is stored in /usr/local/virtual/domain name/user
So if my domain is domain.com and my e-mail address is johan at domain.com
the directory is
2011 Oct 22
2
setacl fails - does not find dovecot-acl file
Hi,
I'm using dovecot 2.0.13 that ships with Ubuntu 11.10.
I tried setting up a shared namespace as documented in the wiki to
enable the sharing of a mailbox between two users.
I have a Maildir(++) directory for each user. Each user has a system
account. The Maildir of each user is owned by the user's system account
and group read/writable by the group mail (hence
2010 Oct 06
1
Shared folder again !
Hello all,
First of all sorry for this, it has been discussed many times, but i can
not make it work.
I tried for a long time now.
I do something wrong, but i do not know what.
First of all, i have virtual users, with virtual domains.
Mail is stored in /usr/local/virtual/domain name/user
So if my domain is domain.com and my e-mail address is johan at domain.com
the directory is
2009 Feb 06
2
[patch] 'c' and 'd' in setacl
Hi Timo,
Hi *,
I just recognized that the new imap-acl plugin in dovecot 1.2 does not
know the obsolete rights 'd' and 'c' when setting. According to RFC
4314 section 2.1.1.:
If a client includes the "d" right in a rights list, then it MUST be
treated as if the client had included every member of the "delete"
right.
and
If a client includes