[Dovecot] Lock down Shared Mail Accounts?

[Timo Sirainen]

On 7.3.2012, at 18.39, Ed W wrote:

>> 5. No one other than a designated user or users (Master User(s)? Users in a specified Group?) can delete any messages in this account, in any of the folders.
> 
> Have them delivered with only read permissions on the physical files? (Bet that doesn't work very well in practice or other than maildir...)

The maildir file's read permission doesn't matter, the parent cur/ or new/ directory's write permission matters. And removing those prevents moving mails from new/ to cur/ and from keeping the flag states in the filename.. Not very good.