Summary | Cannot set ACL for owner |
Queue | IMP |
Queue Version | 6.2.0 |
Type | Bug |
State | Not A Bug |
Priority | 1. Low |
Owners | |
Requester | azurit (at) pobox (dot) sk |
Created | 07/10/2014 (4013 days ago) |
Due | |
Updated | 07/15/2014 (4008 days ago) |
Assigned | |
Resolved | 07/11/2014 (4012 days ago) |
Github Issue Link | |
Github Pull Request | |
Milestone | |
Patch | No |
owner and the server could automatically remove ALL other
permissions. That is perfectly acceptable ACL behavior. And there
is no way for the GUI to know that unless/until you remove the
delete permission.
will "stick" on the server. (Thus, the language from the RFC I quoted
below).
http://wiki2.dovecot.org/ACL
At the end, there is also 'owner' identifier.
MUA/GUI to know that the owner's permissions can't be changed.
Put another way: you could remove the delete permission from the owner
and the server could automatically remove ALL other permissions. That
is perfectly acceptable ACL behavior. And there is no way for the GUI
to know that unless/until you remove the delete permission.
http://wiki2.dovecot.org/ACL
At the end, there is also 'owner' identifier.
with IMP though.
supports it. Yours does not.
the ACL IMAP extension) whether this is possible or not.
This would be no different than if your IMAP backend supported ACLs,
but did not advertise support for the ACL extension (which is a
possible scenario). A user could have no delete rights for a mailbox,
but since there is no way of knowing this the Delete button could not
be hidden in the GUI. The only way of knowing would be to try to
delete a message, at which point you would get an error.
user)? The GUI seems to support this but it's not working. If this is
not possible, why GUI allows me to do it?
Changes have been made in Git (master):
commit 15a79ef7d3e70aa79ee67e4387286e339c56215a
Author: Michael M Slusarz <slusarz@horde.org>
Date: Fri Jul 11 09:17:10 2014 -0600
Ticket #13349: Remove explicit change button for ACL mailbox selectionWe already require javascript on this page, so this button will never be
used.
imp/js/acl.js | 3 ++-
imp/templates/prefs/acl.html.php | 3 ++-
2 files changed, 4 insertions(+), 2 deletions(-)
http://github.com/horde/horde/commit/15a79ef7d3e70aa79ee67e4387286e339c56215a
State ⇒ Not A Bug
IMP has no way of knowing 1) who is the "owner" of the mailbox, or 2)
*which* rights will be affected for any rights alteration. This is
all known/expected/explained in the RFC.
E.g., trying to remove the delete right on the owner user:
C: 3 GETACL Testing.AAB
S: * ACL Testing.AAB slusarz lrwstipekxacd
S: 3 OK Getacl completed.
C: 4 SETACL Testing.AAB slusarz -t
S: 4 OK Setacl complete.
C: 5 GETACL Testing.AAB
S: * ACL Testing.AAB slusarz lrwstipekxacd
S: 5 OK Getacl completed.
As can be seen, the delete right was successfully removed via GUI
request, but the actual rights on the server didn't change.
Directly from RFC 4314 [Appendix C]:
2. Because this extension leaves the specific semantics of how
rights are combined by the server as implementation defined, the
ability to build a user-friendly interface is limited.
the permission screen anyway, so I don't see a use for it.
use even the Basic interface, so you are correct that this is
superfluous. It has been removed in git master.
saved and after reload they are back to 'all privileges'.
I also find the change button confusing as switching folder reloads
the permission screen anyway, so I don't see a use for it.
Milestone ⇒
State ⇒ Unconfirmed
Patch ⇒ No
Queue ⇒ IMP
Summary ⇒ Cannot set ACL for owner
Type ⇒ Bug
Priority ⇒ 1. Low
and after reload they are back to 'all privileges'.