Am 01.05.2012 02:29, schrieb Timo Sirainen:
On Mon, 2012-04-30 at 20:55 +0200, Robert Schetterer wrote:
Hi Timo
my tests resulted in
inheritance is given if a userfolder has set some acl to its new created
subfolder , which is nice
if some userfolder has its acl from global acl
there is no inheritance to its new created subfolders,
that subfolders will always created with full owner rights
i am not really sure if its a good idea
to have inheritance from global acl and
if its hackabel what is your idea to this ?
There is no ACL inheritance feature in Dovecot at all. The only thing
that kind of appears as being inheritance is that when you create a new
mailbox, its ACLs are copied from the parent's (but any future changes
to parent ACLs won't change the child's.)
I've been planning on changing how global ACLs work though. The idea
would be that you'd have a single dovecot-global-acl file that has
fields:
mailbox pattern ACL
So for example you could say:
foo user=tss lrw
This would work the same way as now. But you could also add:
foo/* user=admin lrwstipekxa
This would also apply to the children. Still, none of this is really
inheritance.
Hi Timo, i would say this would be good enough
for new handling global acls , however if its not really
inheritance
--
Best Regards
MfG Robert Schetterer
Germany/Munich/Bavaria
