A NOTE has been added to this issue. ====================================================================== http://www.dbmail.org/mantis/view.php?id=298 ====================================================================== Reported By: windowsrefund Assigned To: paul ====================================================================== Project: DBMail Issue ID: 298 Category: IMAP daemon Reproducibility: always Severity: major Priority: normal Status: feedback ====================================================================== Date Submitted: 04-Feb-06 22:32 CET Last Modified: 19-May-06 20:31 CEST ====================================================================== Summary: Read-only mailboxes can be deleted Description: Note: This problem has been reproduced on 2.0.9
Mailboxes 4 levels deep that have had their 'permission' attribute (dbmail_mailboxes.permission) set to a value of 1 can be deleted. All mail stored in this mailbox will also be deleted, effectively bypassing the read-only attribute of the mailbox. ====================================================================== ---------------------------------------------------------------------- windowsrefund - 04-Feb-06 22:58 ---------------------------------------------------------------------- Please disregard the original verison information in the description. 2.0.9 is currently suffering from LIST problems so this problem affects 2.0.7. I will test 2.0.8 shortly ---------------------------------------------------------------------- windowsrefund - 04-Feb-06 23:42 ---------------------------------------------------------------------- Both 2.0.7 and 2.0.8 suffer from this problem. TRACE LEVEL 5 logs attached. ---------------------------------------------------------------------- dgjackli - 10-Feb-06 02:22 ---------------------------------------------------------------------- ---------------------------------------------------------------------- paul - 30-Apr-06 18:14 ---------------------------------------------------------------------- All write actions on mailboxes (db_delete_mailbox, db_imap_append_msg, db_removemsg) now first check the permission flag (db.c, mailbox_is_writable). So message insertion by the MTA will still succeed which in my view seems the right thing to do. Feel free to reopen this bug if you consider this an omission. ---------------------------------------------------------------------- windowsrefund - 19-May-06 18:08 ---------------------------------------------------------------------- This problem can be reproduced on SVN 2114. ---------------------------------------------------------------------- windowsrefund - 19-May-06 20:31 ---------------------------------------------------------------------- Also reproducible on SVN 2124 My temporary work-around can be found here: http://www.dbmail.org/dokuwiki/doku.php?id=archiving-howto#read-only_mailboxes_can_be_deleted Issue History Date Modified Username Field Change ====================================================================== 04-Feb-06 22:32 windowsrefund New Issue 04-Feb-06 22:58 windowsrefund Note Added: 0000983 04-Feb-06 23:41 windowsrefund File Added: mail.dbmail.debug.log 04-Feb-06 23:42 windowsrefund Note Added: 0000984 10-Feb-06 02:22 dgjackli Issue Monitored: aabramov 10-Feb-06 02:22 dgjackli Note Added: 0000999 14-Feb-06 16:38 paul Status new => assigned 14-Feb-06 16:38 paul Assigned To => paul 30-Apr-06 18:14 paul Note Added: 0001146 30-Apr-06 18:14 paul Status assigned => resolved 30-Apr-06 18:14 paul Resolution open => fixed 30-Apr-06 18:14 paul Fixed in Version => SVN Trunk 19-May-06 18:07 windowsrefund Status resolved => feedback 19-May-06 18:07 windowsrefund Resolution fixed => reopened 19-May-06 18:07 windowsrefund Note Added: 0001181 19-May-06 18:07 windowsrefund Issue Monitored: windowsrefund 19-May-06 18:08 windowsrefund Note Edited: 0001181 19-May-06 20:31 windowsrefund Note Added: 0001182 ======================================================================