[Dovecot] Public namespaces with global ACLs 1.2+

Timo Sirainen tss at iki.fi
Fri Aug 14 00:47:03 EEST 2009


On Thu, 2009-08-13 at 23:10 +0200, Thomas Leuxner wrote:
> Hi,
> 
> I'm having trouble to get ACLs  working in a more restrictive way with  
> namespaces. I would like to grant certain users the ability to create  
> new mailboxes in a public namespace e.g. "Public/Newsletters" etc.
> 
> It works when I add the users to a ".DEFAULT" ACL file like this:
> user=username lrwk
> 
> Anyway I'd like to limit their permissions on the Namespace "Public",  
> or even better - being more restrictive, on "Public/Newsletters".  

I don't really understand. What exactly do you want to limit? Above you
give username lrwk permissions, don't you want them after all?

> Neither global ACL files for "Public" nor "Newsletters" nested in the  
> global path  seem to work. For now only the .DEFAULT ACL (/var/vmail/ 
> domain/etc/acls/.DEFAULT) seems to mitigate the problem which is  
> undesirable.

You anyway probably don't want to use global ACLs. Just put dovecot-acl
files inside those maildirs where you want to change permissions.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
Url : http://dovecot.org/pipermail/dovecot/attachments/20090813/0bcddd60/attachment.bin 


More information about the dovecot mailing list