IMAP Permissions per IP

[Aki Tuomi]

On 10.8.2020 0.58, Jorge Bastos wrote:
>
> Howdy,
>
>  
>
> Is it possible to define IMAP permissions per IT?
>
> What i would like to do is:
>
>  
>
>   * IP 1.1.1.1 IS THE ONLY ONE that has permission for EXPUNGE
>
>  
>
> Is it possible?
>
> Thanks in advanced,
>
Hi!

This is possible, but can be bit tricky to get right.

It involves setting up userdb


userdb {
  driver = passwd-file
  args = username_format=%r /etc/dovecot/acl.passwd
}


this should be after the one where your users are defined. The previous
userdb should have setting result_success=continue-ok.

the passwd file has lines like

1.1.1.1:*::::: userdb_acl_groups=expunger

then you setup ACL plugin

mail_plugins=$mail_plugins acl
plugin {
  acl = vfile:/etc/dovecot/acl
  acl_globals_only = yes
}

and have lines like these in the ACL file

* authenticated lrwstipkx
* group-override=expunger lrwstipekx


Aki