Re: Post ACL

[Philip Guenther <guenther+imap@xxxxxxxxxxxx>]

On Sun, 16 Nov 2008, Timo Sirainen wrote:
...
> I'm not entirely sure about the default 'p' right though. If I give 
> "anyone +p" right it would mean that user1's Sieve script could do 
> fileinto "shared/user2/INBOX", which doesn't seem like a good idea.

I agree: having a default "anyone +p" is unnecessary and 
counter-productive when the system has filters to provide fine-grained 
access-control.


> I guess I could create a completely separate "anonymous" user that 
> doesn't match any other user. Then each mailbox could have by default an 
> "anonymous +p" right (it would match non-INBOX only when using +detail 
> addresses).

Given that you have per-user filters and can get authentication from that, 
why would you supply a default "anonymous +p" right at all?  Assuming 
there's a case where it's necessary, are you sure it's needed for 
mailboxes other than INBOX?


Philip Guenther