Turn on/off IMAP/POP access?

[Ken Murchison]

Jorey Bump wrote:
> Anders Norrbring wrote, at 10/07/2007 07:06 AM:
>> Is there a way to disable a specific user's access to POP and IMAP in 
>> Cyrus? I still want the mail to be delivered to the mailboxes (done via 
>> LMTP), but I would like to turn off the user from getting the mail.
>>
>> In case you wonder, it's for a pay system, so if they don't pay, the 
>> don't get access.
> 
> I would imagine that the Cyrus way would be to change the ACL on the 
> user's mailbox, using cyradm (or Cyrus::IMAP::Shell, in a perl script):
> 
> List ACLs:
> 
>   localhost> lam user.bob
>   bob lrswipkxtecda
> 
> Delete ACLs:
>   localhost> dam user.bob bob read
> 
> List again, to confirm ACLs:
>   localhost> lam user.bob
> 
> 
> Now bob can't read his INBOX, and will get a message like the following 
> when he tries (this is from Thunderbird):

This won't work since Cyrus implicitly gives user's at least 'lca' 
rights on their own mailboxes, regardless of the explicitly granted ACL.

Disabling the authentication credentials is the best way to do this.

-- 
Kenneth Murchison
Systems Programmer
Project Cyrus Developer/Maintainer
Carnegie Mellon University