Sharing Mailbox between users using IMAP

[Steffen Kaiser]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, 29 Jun 2018, Remko Lodder wrote:
>> On 29 Jun 2018, at 09:42, Luca Bertoncello <lucabert at lucabert.de> wrote:
>>
>> Hi list!
>>
>> I have an account (let's say info at mydomain.com) that should be read from more people.
>> These people does NOT have an account on the server.
>> Currently info at mydomain.com is a forward to their addresses, but of course this solution has a huge problem: if info@ receives spam that the server does not recognize, the server forwards spam...
>>
>> Now I want to solve this problem and I had the idea to change info@ from "forward" to "local account".
>> Then, I can read the E-Mails via IMAP.
>>
>> Now the question: if I have 5-6 people accessing the account via IMAP, has Dovecot (2.2.13 from Debian repositories) problems?
>>
>> Is there other solution, if the users don't want to have an account on the server?
>
> Emails can only be read if they are authenticated / authorized in someway to access the store. That means you might need to share the info@ credentials with the other
> people so that they can read it over imap or webmail etc.

As Remko points out, you need some sort of authorization to access the 
messages. The easiest is an account on the server, the messages are 
located at.

I would suggest one account for the "info" role, that shares its mailboxes 
to one account per (natural) person. That way, if one person is to deny 
the access, you do not have to change the password and give it to the 
other persons.

If you have other ways of authorization, such as: IP address (remote side 
of connection), think about using those implicit ones.

- -- 
Steffen Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEVAwUBWzXp4cQnQQNheMxiAQIJgwf+POvM8AN47w8fOypRZHjZN8izQgs0dAtB
HCN6dXK8TNCEVrvNQhRW/zcKVzYp69N+hxcRbjUxK7JT57y/GqgrQX8byV8PSqtC
G2SxmMZD82xYxt1TVe0Er54lj+TFU26kms2CiV2jNstJbK3hlTYTSNLsPACo1fSt
x0bMn27zZnqBnBBdiO5hb+gAPzs2vJGGjAVrwoNI4qBISp09rQ+xxyweD7KgjUR3
Gn2kKZKTux+42Wil5R060BgmjC9kTBM17ZQexFjxKAvOxgkRZ4uzwxWNk1VEDft8
aV6ztCJE01IwjImqUF1BxHZn/M3NPmFCTOg3m4bj44p1h1U/Y3xMsw==
=hAvM
-----END PGP SIGNATURE-----