AW: Posting directly to subfolder / "+"-Notation [postfix]

[Christoph Moench-Tegeder]

## Nikola Milutinovic (Nikola.Milutinovic at ev.co.yu):

> I mean, I'm not thrilled with having "anyone" or "anonimous" 
> authentications authorized to post to such folders or to public shared 
> folders. True, it would take some effort to abuse it (if it is even 
> possible), but I'd still like it out of the picture. I would like the 
> message submission via LMTP to be authenticated (automatically?) as user 
> "cyrus", while those who connect to the IMAP server cannot post to 
> public folders.

Read the RFC. "p" is "send mail to submission address for mailbox"
while putting messages into a folder via IMAP needs "i" rights
("perform APPEND, COPY into mailbox").
So just give "anyone" "p" and be happy with that :)

Regards,
Christoph

-- 
Spare Space
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html