[Dovecot] ACLs - creating new top level folders

[Ingo Rogalsky]

Hi,

I'm wondering, whether it's possible, to define an ACL on the mailbox 
itself. We use Dovecot 1.2.15 (included in Debian 6) and maildir 
filesystem layout:

/home/mail01/user1/Maildir/new           \
/home/mail01/user1/Maildir/cur            Inbox
/home/mail01/user1/Maildir/tmp           /
/home/mail01/user1/Maildir/.folder1/new  \
/home/mail01/user1/Maildir/.folder1/cur   folder1
/home/mail01/user1/Maildir/.folder1/tmp  /
...

Assigning an ACL with full access rights for user2 to the folder Inbox 
works as expected. user2 can create subfolders of Inbox, too. But he 
can't create a new folder like folder1 parallel to Inbox. Is there a 
possibility of defining an ACL on the mailbox of user1 itself? Or do we 
need to create all subfolders beneath Inbox like this is usual with 
other IMAP servers?

Ingo

---
/usr/sbin/dovecot -c /etc/dovecot/dovecot-test.conf -n

# 1.2.15: /etc/dovecot/dovecot-test.conf
# OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.7
base_dir: /var/run/dovecot-test/
log_path(default): /var/log/dovecot-test/error.log
log_path(imap): /var/log/dovecot-test/error.log
log_path(pop3): /var/log/dovecot-test/error.log
log_path(managesieve): /var/log/dovecot-test/managesieve.log
info_log_path(default): /var/log/dovecot-test/info.log
info_log_path(imap): /var/log/dovecot-test/info.log
info_log_path(pop3): /var/log/dovecot-test/info.log
info_log_path(managesieve): /var/log/dovecot-test/managesieve.log
protocols: imap imaps pop3 pop3s managesieve
listen(default): *:10143
listen(imap): *:10143
listen(pop3): *:10110
listen(managesieve): *:12000
ssl_listen(default): *:10943
ssl_listen(imap): *:10943
ssl_listen(pop3): *:10995
ssl_listen(managesieve):
ssl_cert_file: /etc/ssl/certs/imap-cert.pem
ssl_key_file: /etc/ssl/private/imap-key.pem
shutdown_clients: no
login_dir: /var/run/dovecot-test//login
login_executable(default): /usr/lib/dovecot/imap-login
login_executable(imap): /usr/lib/dovecot/imap-login
login_executable(pop3): /usr/lib/dovecot/pop3-login
login_executable(managesieve): /usr/lib/dovecot/managesieve-login
login_max_processes_count: 4096
max_mail_processes: 4096
verbose_proctitle: yes
mail_location: 
maildir:~/Maildir:INDEX=/srv/dovecot/index/%u:CONTROL=/srv/dovecot/control/%u
maildir_copy_preserve_filename: yes
mbox_write_locks: fcntl dotlock
mail_executable(default): /usr/lib/dovecot/imap
mail_executable(imap): /usr/lib/dovecot/imap
mail_executable(pop3): /usr/lib/dovecot/pop3
mail_executable(managesieve): /usr/lib/dovecot/managesieve
mail_process_size: 1024
mail_plugins(default): fts fts_squat acl imap_acl
mail_plugins(imap): fts fts_squat acl imap_acl
mail_plugins(pop3):
mail_plugins(managesieve):
mail_plugin_dir(default): /usr/lib/dovecot/modules/imap
mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap
mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3
mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve
pop3_lock_session(default): no
pop3_lock_session(imap): no
pop3_lock_session(pop3): yes
pop3_lock_session(managesieve): no
pop3_uidl_format(default): %08Xu%08Xv
pop3_uidl_format(imap): %08Xu%08Xv
pop3_uidl_format(pop3): %08Xv%08Xu
pop3_uidl_format(managesieve): %08Xu%08Xv
namespace:
   type: private
   separator: /
   inbox: yes
   list: yes
   subscriptions: yes
namespace:
   type: shared
   separator: /
   prefix: Other Users/%%u/
   location: 
maildir:%%h/Maildir:INDEX=/srv/dovecot/index/%%u:CONTROL=/srv/dovecot/control/%%u
   list: children
lda:
   postmaster_address: postmaster at ...
   mail_plugins: sieve acl
   quota_full_tempfail: yes
   auth_socket_path: /var/run/dovecot-test/auth-master
   log_path: /var/log/dovecot-test/deliver.log
   info_log_path: /var/log/dovecot-test/deliver.log
auth default:
   cache_size: 1024
   cache_negative_ttl: 0
   username_chars: 
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@~
   master_user_separator: *
   debug: yes
   passdb:
     driver: passwd-file
     args: /etc/dovecot/dovecot-passwd.masterusers
     pass: yes
     master: yes
   passdb:
     driver: passwd-file
     args: /etc/dovecot/dovecot-passwd
   passdb:
     driver: pam
   userdb:
     driver: passwd-file
     args: /etc/dovecot/dovecot-passwd
   socket:
     type: listen
     client:
       path: /var/run/dovecot-test/auth-client
       mode: 384
       user: vmail
     master:
       path: /var/run/dovecot-test/auth-master
       mode: 384
       user: vmail
plugin:
   acl: vfile
   acl_shared_dict: file:/srv/dovecot/lib/shared-mailboxes
   sieve: ~/.dovecot.sieve
   sieve_dir: ~/.pysieved
   fts: squat
   fts_squat: partial=4 full=10