Patch: add new lmtptarget annotation
Wesley Craig
wes at umich.edu
Tue May 18 13:47:48 EDT 2010
Seems like a reasonable approach and a good patch. I might suggest
some feedback, preferably to the deleting / renaming user but a
syslog might also do, when the delete / rename failed.
Is there a bugzilla number?
:wes
On 18 May 2010, at 12:38, Stephen Grier wrote:
> Just submitting a patch I'm supporting locally for consideration.
>
> We use shared mailboxes quite extensively for role-based
> communication.
> For quite some time we've had a problem with users deleting or
> renaming
> mailboxes into which we deliver mail. We can, and do, use IMAP ACLs to
> dissallow users from deleting the delivery target mailbox. But when a
> user creates a child mailbox it inherits the ACLs of the parent,
> and the
> user is then not able to delete or rename the sub folder.
>
> As a fix, I have written a patch against 2.3.16 to add a new
> lmtptarget
> mailbox annotation. When enabled, Cyrus won't allow the mailbox to be
> deleted or renamed. We can then set whatever ACLs we want inherited by
> child mailboxes, happy in the knowledge the user won't blat the
> mailbox
> and cause mail to bounce.
>
> The rationale here is that Cyrus treats user.foo with special
> significance as a delivery target, but does not do the same for shared
> mailboxes because there is no way for Cyrus to know which shared
> mailboxes we intend to deliver mail into. Using a mailbox annotation
> seems a nice way of flagging this.
>
> Patch attached. Comments welcome.
More information about the Info-cyrus
mailing list