On 8 Aug 2018, at 10.27, Simeon Ott <simeon.ott@onnet.ch> wrote:

Okay, this seems to be due to the fact that the option “use_globals_only" is supported only in v2.2.31+

We are on Debian jessie with dovecot v2.2.13 – even an upgrade to current stable stretch won’t help (dovecot v2.2.27). So we will wait until the packages find their way into the repository.

thanks anyway

On 7 Aug 2018, at 13:00, Simeon Ott <simeon.ott@onnet.ch> wrote:

but, did you read my last note anyway?

IMPORTANT NOTE: anyway.. even with this options set (acl and acl_globals_only) the user test@onnet.ch is still able to share its own folders?!

root@buserver:/etc/dovecot# doveadm user test@onnet.ch

field value

uid 5000

gid 5000

home /var/spool/postfix/virtual/onnet.ch/test/

mail maildir:~/Maildir

quota_rule *:bytes=1073741824

acl vfile:/etc/dovecot/dovecot-acl

acl_globals_only yes

root@buserver:/etc/dovecot# telnet localhost 143

Trying ::1...

Connected to localhost.

Escape character is '^]'.

* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready.

. login test@onnet.ch *********

. OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE QUOTA ACL RIGHTS=texk] Logged in

. SETACL Inbox test2@onnet.ch lrwstipekxa

. OK Setacl complete.

. GETACL Inbox

* ACL Inbox test2@onnet.ch akxeilprwtscd test@onnet.ch lrwstipekxacd

. OK Getacl completed.