Restricting commands used in http api

[Christian Küppers]

Hello,

is it possible to restrict api methods
(https://doc.dovecot.org/admin_manual/doveadm_http_api/#api-methods) 
without restricting doveadm usage on console.

something like:

service doveadm {
   unix_listener doveadm-server {
      user = vmail
   }
   inet_listener {
       port = 2425
       allowed_commands = ALL
   }
   inet_listener http {
       port = 8080
       allowed_commands = fetch, copy, search
       #ssl = yes # uncomment to enable https
   }
}

Reason for question: We want to be able to use all commands as administrators on
console but some external software using the dovecot api should not be able to do 
admin like tasks like "doveadm director flush".

our setup:
multiple replicated dovecot backend servers
frontend with dovecot director ring and proxy enabled (provides api endpoint)

Kind regards,
 
Christian Küppers
Expert Administrator

 

onOffice GmbH
Charlottenburger Allee 5 | 52068 Aachen
Tel. +49 (0)241 446 86-0  | Fax. +49 (0)241 446 86-250
E-Mail:c.kueppers at onoffice.de| Web:www.onOffice.com

 
Registergericht: Amtsgericht Aachen, HRB 21420
Geschäftsführer: Dipl.-Kfm. Stefan Mantl
Prokuristen: Janosch Reuschenbach, Kristina Andresen, Christian Mähringer