[Dovecot] recursive acl problem

Robert Schetterer robert at schetterer.org
Mon Jul 21 15:35:21 EEST 2008


Hi,
i ve got a problem with
recursive acl, using not a vfile global backend.
( no default acl)

In my understanding
every folder(directory)
needs a seperate dovecot-acl
files with permissions.
This works fine, but my tests showed
using a shared namespace
like i.e.

namespace shared {
   separator = /
   prefix = "users/%d/"
   location = dbox:/usr/local/virtual/%d/
   inbox = no
   list = yes
   subscriptions = yes
   hidden = no
}

and have dovecot-acl in
usr/local/virtual/%d/ with
authenticated l

which means lookup, leads
that all folders and subfolders
of /usr/local/virtual/%d/%u/
are imap browseable, which means
its recursive somekind.

( people will not like seeing folder names of their mailboxes until they 
dont gave permissions explicit to others)

In my meaning this shouldnt be so
only names of ( names of directories) at /usr/local/virtual/%d/%u/
should be shown  , subfolders in them should only be
imap browseable if there is another dovecot-acl in them which permits 
lookup

i may fail here , anyone which has some enlightment for me outside?

-- 
Best Regards

MfG Robert Schetterer

Germany/Munich/Bavaria


More information about the dovecot mailing list