On Wed, 2009-03-04 at 17:01 +0100, Sascha Wilde wrote:
> Hi *,
> 
> The problem is most noticeable when a user shares his INBOX[0][1] with
> others:
> 
> User A sets his INBOX acls to "eilprwtsd"
> 
> Now User B can see _all_ sub mailboxes and sub sub [...] mailboxes and
> their contents of User A:

That shouldn't happen. There's no code for doing recursive ACLs. Sounds
more like a bug somewhere. I'll check it later.

>   * ACL "INBOX" "[email protected]" akxeilprwtscd "[email protected]" eilprwtsd 
> "[email protected]" lrwstipekxacd

[email protected] is there twice?..

>   * LIST (\HasChildren) "/" "user/[email protected]/foobar"

How does user B see this mailbox's ACLs? Is the mailbox also selectable?

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to