You could do

userdb {
   driver = username_format=%Lu passwd-file
   args = /etc/dovecot/share.passwd
}

#  /etc/dovecot/share.passwd
test@onnet.ch::::::: userdb_acl=vfile:/etc/dovecot/dovecot-acl userdb_acl_globals_only = yes

should prevent the user from modifying any ACL files.

Aki

On 05.08.2018 17:04, Simeon Ott wrote:

Hello

Is it possible to limit the ability of sharing it’s own mailboxes to only a few users?

We have a few sensitive mailboxes of users where the ability to share via IMAP SETACL should be prevented.

I tried the following so far…

  doveadm acl remove -u test@onnet.ch INBOX user=test@onnet.ch admin

but when doing this the admin rights are still there

  doveadm acl rights -u test@onnet.ch INBOX

  vmail@buserver:~$ doveadm acl rights -u test@onnet.ch INBOX

  Rights                                                                                                                

  lookup read write write-seen write-deleted insert post expunge create delete admin

Thanks in advance for your help

Simeon