Preventing message deletion
Hi all
How may I disable message deletions via IMAP for some or all of my users? I read on the net that a possible solution would be to use the ACL IMAP plugin. But the examples I found were not so clear to me. We do not use shared mailboxes or namespaces. Only simple virtual users, each with it's own private mailbox. I would like to use the global acl file both for administration simplicity and because as I understood, global acl enrties take preference over any user setting.
In the ACL page example there is a line:
- user=foo lrw
But in the comment it tells that doing so, every user' mailbox would be shared with the foo user, with the lrw permissions. Which is not what I would want. I don't need to share anything, just to restrict what the user, foo here, can do on his mailbox.
Thank you, Luigi
Thank you AKi for the clarification.
At least in this rather old dovecot-2.2.36 from CentOS 7 (I know, it needs updating but I have to do what says the one who pays:) using the negative "-te" form did not work. I found in my logs: dovecot: imap(test@domain.com): Error: Global ACL file /etc/dovecot/global-acls line 1: Unknown ACL '-' and mailbox access was prevented for all users.
I used the form
- user=test@domain.com lrwsipk
And it seem to work now.
Thank you again.
Sorry for the late reply: I made some test.
The solution suggested works. Indeed, I used the explicit username and not "owner" in the acl line just because I have to restrict only some users.
But another problem appeared. Now it's not possible to move messages between IMAP folders. I dumped the traffic and a MOVE imap command Is issued. I found that the "e" (expunge) acl right is what is missing, which was cleared out to prevent deletions. I just imagine that there is no solution to prevent message delete, but allow move, but hope there are other solutions.
Thank you Luigi
participants (2)
-
Aki Tuomi
-
dovecot＠iotti.biz