Hello Viet,
On 2013-04-12 07:20, Hoang Tuan Viet wrote:
I have created a regular account [email protected].
When I searched with no resource with that account:
Apr 12 12:04:22 ldap-2 piler-webui[23799]: sphinx query: 'SELECT id
FROM main1 WHERE MATCH('@to vietXmydomainXcom') ORDER BY `sent` DESC
LIMIT 0,1000 OPTION max_matches=1000' in 0.00 s, 8 hits
When I searched with "From: viet"
Apr 12 12:10:28 ldap-2 piler-webui[13766]: sphinx query: 'SELECT id
FROM main1 WHERE MATCH('(@from viet & @to vietXmydomainXcom)') ORDER
BY `sent` DESC LIMIT 0,1000 OPTION max_matches=1000' in 0.00 s, 0 hits
The gui rewrites every search request issued by ordinary users. It does
so
to prevent a user to access others emails. To do that it adds a filter
based on your email addresses, it's "@to vietXmydomainXcom".
If you want to see your own sent emails then search for the following:
from: [email protected]
However if you are an auditor there's no protecting filter, since an
auditor is allowed to see everything by design. That's why for an
auditor
it's enough to enter: "from: viet".
But if you as an ordinary user just enter the same, then the gui
doesn't
know that it's your address thus it adds the filter.
When I searched with "To: viet"
Apr 12 12:11:47 ldap-2 piler-webui[13914]: sphinx query: 'SELECT id
FROM main1 WHERE MATCH('(@from vietXmydomainXcom & @to viet)') ORDER
BY `sent` DESC LIMIT 0,1000 OPTION max_matches=1000' in 0.00 s, 0 hits
the same applies here, too. Just hit the search button, an it
automatically
filters to your received emails.
It's interesting however how you got a "no permission" message, since
you
shouldn't see others' emails in the search results.
Janos
