I should probably add that the ACL file in the public mailbox is read correctly according to the logs: Mar 25 15:53:34 imap(gber at test.invalid): Debug: acl vfile: reading file /srv/mail/public/Test/dovecot-acl -- Guido Berhoerster