AW: AW: Posting directly to subfolder / "+"-Notation [postfix]

[Thomas Schlosser]

> -----Ursprüngliche Nachricht-----
> Von: owner-info-cyrus at lists.andrew.cmu.edu 
> [mailto:owner-info-cyrus at lists.andrew.cmu.edu] Im Auftrag von 
> Nikola Milutinovic
> Gesendet: Mittwoch, 30. März 2005 12:05
> An: info-cyrus at lists.andrew.cmu.edu
> Betreff: Re: AW: Posting directly to subfolder / "+"-Notation 
> [postfix]
> 
> 
> Thomas Schlosser wrote:
> 
> >Great, now it works! Thanks a lot.
> >BUT for my understanding:
> >- the "p" right was not set automatically to folders under user.xyz
> >  So i had to set it manually the folder(s) directly. Is this always 
> >the case?
> >- Whose "p" right is needed? "Anonymous" worked. But I 
> thought that the 
> >rights
> >  of the sender of the message is somehow relevant. So I can 
> NOT give 
> >certain
> >  sender the right to post to public folders?
> >  
> >
> 
> It is assumed that only some subfolders of users mailbox 
> should be able 
> to receive mail messages from the outside. Others are for that user's 
> internal use. How would you like to have your "docs" subfolder, for 
> instance, flooded with some mail, while you use that folder 
> for oyur own 
> mail sorting?
> 
> Of course, if the server can sort it out, it is a different matter.
> 
> One other question that I have, is, is there any way to give "p" 
> permission to user "cyrus" and use it?
> 
> I mean, I'm not thrilled with having "anyone" or "anonimous" 
> authentications authorized to post to such folders or to 
> public shared 
> folders. True, it would take some effort to abuse it (if it is even 
> possible), but I'd still like it out of the picture. I would like the 
> message submission via LMTP to be authenticated 
> (automatically?) as user 
> "cyrus", while those who connect to the IMAP server cannot post to 
> public folders.
> 
> Any idea?
> 
I thought that you have already a separation between "coming through LMTP"
and "coming internally". The "external" user seems to be not "cyrus" but 
"anonymous". So you can give anonymous "p" and the real user not.
But in both cosntructions internal users can go through external MTA and
post to folders open to anomymous.


---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html