Rémi Kowalski created JAMES-3032:
------------------------------------

             Summary: [JMAP] Allow a user to send an email with a from address 
containing one of her alias
                 Key: JAMES-3032
                 URL: https://issues.apache.org/jira/browse/JAMES-3032
             Project: James Server
          Issue Type: Improvement
    Affects Versions: 3.5.0
            Reporter: Rémi Kowalski


Currently James checks that the user connected matches the user is the From 
header of a mail being sent.
Instead, James should allow that the From header contains any alias of the 
connected user.
This also matches the current JMAP specification security considerations: 
https://jmap.io/spec-mail.html#permission-to-send-from-an-address



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to