Rémi Kowalski created JAMES-3038:
------------------------------------
Summary: [SMTP] Allow a user to send an email from on of her alias
Key: JAMES-3038
URL: https://issues.apache.org/jira/browse/JAMES-3038
Project: James Server
Issue Type: Improvement
Affects Versions: 3.5.0
Reporter: Rémi Kowalski
Currently James checks that the user connected matches the user is the From
header of a mail being sent.
Instead, James should allow that the From header contains any alias of the
connected user.
The alias the user can send from should be the one from its user alias and
domain alias.
It should not be allowed to send from a group alias.
This also matches the current JMAP specification security considerations:
[https://jmap.io/spec-mail.html#permission-to-send-from-an-address]
It is the equivalent for the SMTP protocol of
https://issues.apache.org/jira/browse/JAMES-3032 which targeted JMAP.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
