[Dovecot] IMAP ACLs and global ACLs in v1.2

[Sascha Wilde]

Robert Schetterer <robert at schetterer.org> writes:
> Sascha Wilde schrieb:
>> Robert Schetterer <robert at schetterer.org> writes:
>>> Bernhard Herzog schrieb:
>>>> On 15.01.2009, Sascha Wilde wrote:
>>>>>> But should it just internally convert "owner" to "username" when
>>>>>> replying?
>>>>> From our experience this would be a very good idea.  Many clients
>>>>> recognize the username and handle those ACLs differently in there UI
>>>>> (for example they don't offer them for editing).  But they don't
>>>>> understand "owner".
>>>> To work around this, we created a patch that tries to avoid the owner ACL 
>>>> entries.
>> [...]
>>> i dont think you should mess around what clients think
>>> where should this end , the technical right and most clear description
>>> is owner, username can be very wide interpreted and may lead
>>> to technical problems in reading imap-acl i.e from horde imp or other
>>> mail clients later, as far i remember owner is use i.e in exchange too

>> I'm not quite sure if we are talking about the same thing.  This is
>> about the reply to the getacl command in the imap protocol (in opposite
>> to the output in the clients UI).
>
> i was talking about imap getacl, which answers owner

Me too.

[...]
>> I don't know about exchange, but most clients don't know about dovecots
>> special meaning of "owner" but simply consider it an ordinary user name.
>
> do you mean clients as humans or mail clients?

Mail clients == software speaking IMAP aware of the IMAP ACL extension.

[...]
> whatever what i mean was leave the code to standarts

I agree, and we do.  Problem is, while not prohibited by the standard
keywords like "owner" are not defined by the standard.  Even worse: there
is no way in IMAP ACL to distinct such special keywords from actual user
names.

Please see the first footnote in my latest mail in the thread
"v1.2.beta1 released" Message-ID: <s7wskmj26vr.fsf at intevation.de> for
more details.

cheers
sascha
-- 
Sascha Wilde                                          OpenPGP key: 4BB86568
http://www.intevation.de/~wilde/                  http://www.intevation.de/
Intevation GmbH, Neuer Graben 17, 49074 Osnabrück; AG Osnabrück, HR B 18998
Geschäftsführer:   Frank Koormann,  Bernhard Reiter,  Dr. Jan-Oliver Wagner
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 188 bytes
Desc: not available
Url : http://dovecot.org/pipermail/dovecot/attachments/20090212/d7f50498/attachment.bin