<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body smarttemplateinserted="true">
<div id="smartTemplate4-quoteHeader">
<div style="font-size:10.0pt;font-family:Verdana,Arial">> I
think it's good that you have to explicitly set "anyone p",
because otherwise people would be able to send plus+adressed
mails to any mailbox whose name they can guess.<br>
<br>
As the default behavior, I agree.<br>
<br>
I've just made a couple of tests: remove "anyone p" then add
"postman p" or add postman as "admins: postman" but none of
these worked for plus+addressing (P+A), so the <i>postman</i>
user appears to be some hardcoded way of dealing with LMTP
delivery and has nothing in common with the normal users and
operations.<br>
<br>
If my assumptions are correct, I guess what Chen (OP) was asking
would be useful, i.e. to be able to define "anyone p" (either as
a toggle aimed at P+A or as a free-form for any user/ACL) for
some auto-created folders along the other auto-configuration
features (autocreate_XXX, x-list, etc.). The idea is to be able
to setup most common settings for new users without any external
scripts talking to cyradm or imtest. In my case the "anyone p"
permission is the only thing pending.<br>
<br>
Something like: <font face="Courier New">autocreate_acl
<folder> <user> <acl></font> (multiple
autocreate_acl entries could be specified)<br>
<br>
Ellie, do you think this is something of low complexity?<br>
<br>
</div>
<div style="border:none;border-top:solid #B5C4DF
1.0pt;padding:3.0pt 0cm 0cm
0cm;font-size:10.0pt;font-family:"Tahoma","sans-serif""><b>From:</b>
Sebastian Hagedorn<br>
<b>Sent:</b> Friday, May 11, 2018 04:36<br>
<b>To:</b> Anatoli<br>
<b>Cc:</b> Info-cyrus<br>
<b>Subject:</b> Re: setting acl on autocreate folders<br>
</div>
<br>
</div>
<span type="cite"
cite="mid:8D980FE76D595A6FBD25CE7F@Sebbis-iMac.local"
style="display: block; word-break: break-all; margin: 7px 0 0 0;
padding: 0; line-height:0"></span>
<blockquote type="cite">So what I'm observing in practice is that
the "-a" option is not enough
<br>
to deliver plus+addressed mails without the "anyone p" ACL
permission in
<br>
the folder, which makes me think that the user for "-a" option is
not
<br>
from the admins group, though it probably should be, right? I.e.
lmtpd -a
<br>
should be delivering plus+addressed mails without the "anyone p"
ACL
<br>
permission?
<br>
</blockquote>
<br>
I think it's good that you have to explicitly set "anyone p",
because otherwise people would be able to send plus-adressed mails
to any mailbox whose name they can guess.
<br>
--
<br>
Sebastian Hagedorn - Weyertal 121, Zimmer 2.02
<br>
Regionales Rechenzentrum (RRZK)
<br>
Universität zu Köln / Cologne University - Tel. +49-221-470-89578<br>
<br>
</body>
</html>