ACLs and cross-namespace move problem

[Thomas Cataldo]

On Mon, Mar 11, 2013 at 3:33 PM, Marc Patermann <
hans.moser at ofd-z.niedersachsen.de> wrote:

> Thomas,
>
> Thomas Cataldo schrieb (11.03.2013 10:21 Uhr):
>
>
>> "Note that some rights are available implicitly, for example 'anonymous'
>> always has 'p' on user INBOXes, and users always have rights on mailboxes
>> within their INBOX hierarchy."
>>
> Do you have a link?
>
>
https://cyrusimap.org/docs/cyrus-imapd/2.4.17/overview.php#acladm


>
>  I think Archive should qualify as "user B always has rights on mailboxes
>> within the INBOX hierarchy, like the Archive folder".
>> When I look at the permissions with cyradm, I have :
>>
>> localhost> lam user/b at willow.vmw
>> b at willow.vmw lrswipkxtecda
>> admin0 lrswipkxtecda
>> a at willow.vmw lrswipkxtecd
>>
>> localhost> lam user/b/Archive at willow.vmw
>> admin0 lrswipkxtecda
>> a at willow.vmw lrswipkxtecda
>>
>>
>> Do I mis-understand something or should I file a bug ? (I am using unix
>> hierarchy sep + altnamespace)
>>
> I think this has always been this way.
> If you create a subfolder it inherits the rights from the upper level and
> so you have the same right for INBOX and subfolders, as long as you do not
> change the rights. You can always revoke your own rights, I think.
> Moving/renaming a folder has always (as far I remember for 2.2. und 2.3)
>  been keeping the rights with the folder.
>
>
> Marc
>

The question is can we consider it a bug ? The same kind of problems
happens when an IMAP client deletes a folder inside a shared folder. It
renames the folder to move it to my trash and all the people that had read
permissions on the shared folder start seeing Other users/me/Trash/The
deleted folder in their imap clients.

Another related question would be, how do you guys deal with that ?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20130312/28661f47/attachment.html