[
https://issues.apache.org/jira/browse/JAMES-3038?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17036887#comment-17036887
]
Raphael Ouazana commented on JAMES-3038:
----------------------------------------
Fixed by https://github.com/linagora/james-project/pull/3083
> [SMTP] Allow a user to send an email from on of her alias
> ---------------------------------------------------------
>
> Key: JAMES-3038
> URL: https://issues.apache.org/jira/browse/JAMES-3038
> Project: James Server
> Issue Type: Improvement
> Affects Versions: 3.5.0
> Reporter: Rémi Kowalski
> Priority: Major
>
> Currently James checks that the user connected matches the user is the From
> header of a mail being sent.
> Instead, James should allow that the From header contains any alias of the
> connected user.
> The alias the user can send from should be the one from its user alias and
> domain alias.
> It should not be allowed to send from a group alias.
> This also matches the current JMAP specification security considerations:
> [https://jmap.io/spec-mail.html#permission-to-send-from-an-address]
>
> It is the equivalent for the SMTP protocol of
> https://issues.apache.org/jira/browse/JAMES-3032 which targeted JMAP.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
