<!DOCTYPE html><html><head><title></title><style type="text/css">
p.MsoNormal,p.MsoNoSpacing{margin:0}</style></head><body><div style="font-family:Arial;">On Thu, Jun 25, 2020, at 00:57, Ricardo Signes wrote:<br></div><blockquote type="cite" id="qt" style=""><div>Behold this commit:<br></div><div><br></div><pre style="border-top-width:1px;border-right-width:1px;border-bottom-width:1px;border-left-width:1px;border-top-style:solid;border-right-style:solid;border-bottom-style:solid;border-left-style:solid;border-top-color:rgb(204, 204, 204);border-right-color:rgb(204, 204, 204);border-bottom-color:rgb(204, 204, 204);border-left-color:rgb(204, 204, 204);border-image-source:initial;border-image-slice:initial;border-image-width:initial;border-image-outset:initial;border-image-repeat:initial;border-top-left-radius:3px;border-top-right-radius:3px;border-bottom-right-radius:3px;border-bottom-left-radius:3px;background-image:initial;background-position-x:initial;background-position-y:initial;background-size:initial;background-attachment:initial;background-origin:initial;background-clip:initial;background-color:rgb(246, 246, 246);font-family:menlo, consolas, monospace;font-size:90%;margin-top:7px;margin-right:0px;margin-bottom:7px;margin-left:0px;padding-top:7px;padding-right:10px;padding-bottom:7px;padding-left:10px;white-space:pre-wrap;overflow-wrap:break-word;">commit da8305164877735ba29b078151c70455f1aa6eea
Author: Bron Gondwana <<a href="mailto:brong@fastmail.fm">brong@fastmail.fm</a>>
Date: Wed Oct 30 14:13:38 2019 +1100
imapd: allow disabling the SETACL command<br></pre><div><br></div><div>I'm not sure what the intent here was, but I <i>assume</i> it was related to our plan to kill of the ability of users to set their own ACLs. If so, I think we need two small changes which I'd like to get out pretty soon.<br></div><div><br></div><ol><li>relax the restriction so the admin user can still use SETACL<br></li><li>tighten the restriction so it also restricts DELETEACL<br></li></ol><div><br></div><div>That's it! Then we'll move on to rolling that out and cleaning up users' existing ACLs. I have tentatively made <a href="https://app.liquidplanner.com/space/14822/projects/show/58761531">a task for this</a>.<br></div><div><br></div><div>Bron: I just want to make sure we're not stepping on work intended for something else!<br></div></blockquote><div style="font-family:Arial;"><br></div><div style="font-family:Arial;">So... this does also handle DELETEACL, because they both call cmd_setacl, just with different paramenters. Maybe it should be called cmd_frobacl or something.<br></div><div style="font-family:Arial;"><br></div><div style="font-family:Arial;">As for allowing the admin - the way to do that is for the admin to connect to a different imapd which has no such restrictions. At least the way this is intended for use at Fastmail, it will only be on set on particular services entries rather than globally, so the `imapadmin` service won't have it set.<br></div><div style="font-family:Arial;"><br></div><div style="font-family:Arial;">Bron.<br></div><div style="font-family:Arial;"><br></div><div id="sig56629417"><div>--<br></div><div> Bron Gondwana, CEO, Fastmail Pty Ltd<br></div><div> brong@fastmailteam.com<br></div><div><br></div></div><div style="font-family:Arial;"><br></div></body></html>