Tickets :: [#4488] Deal with "negative rights" in IMAP ACLs

6.0.0-alpha12

6/12/25

Summary	Deal with "negative rights" in IMAP ACLs
Queue	IMP
Queue Version	Git master
Type	Enhancement
State	Resolved
Priority	1. Low
Owners	slusarz (at) horde (dot) org
Requester	selsky (at) columbia (dot) edu
Created	10/04/2006 (6826 days ago)
Due
Updated	03/03/2011 (5215 days ago)
Assigned
Resolved	03/03/2011 (5215 days ago)
Milestone
Patch	No

03/03/2011 07:26:41 PM	Michael Slusarz	Assigned to Michael Slusarz State ⇒ Resolved Version ⇒ Git master

03/03/2011 07:25:47 PM	Git Commit	Comment #6	Reply to this comment
Changes have been made in Git for this ticket: ~~Request #4488~~: visually indicate ACL negative rights create mode 100644 framework/Imap_Client/lib/Horde/Imap/Client/Data/AclNegative.php http://git.horde.org/horde-git/-/commit/1998958d01ca9bba48390f7bf4ccc8bcf91d4f5f

04/16/2007 04:43:31 AM	Chuck Hagenbuch	Comment #5 State ⇒ Accepted	Reply to this comment
Works for me.

04/13/2007 05:03:44 PM	Jan Schneider	Comment #4	Reply to this comment
How about strike-through'ing the user names and some help icon next to it?

04/13/2007 04:02:38 PM	Chuck Hagenbuch	Comment #3	Reply to this comment
Matt or other ACL folks, any thoughts here?

02/05/2007 12:00:51 AM	Chuck Hagenbuch	Comment #2 State ⇒ Feedback	Reply to this comment
Any suggestions on how to display negative ACLs?

10/04/2006 11:10:40 PM	Matt Selsky	Comment #1 Priority ⇒ 1. Low State ⇒ Accepted Queue ⇒ IMP Summary ⇒ Deal with "negative rights" in IMAP ACLs Type ⇒ Enhancement	Reply to this comment
If an identifier is prefixed with a "-", then it is a negative ACL. From RFC 2086: "When an identifier in an ACL starts with a dash ("-"), that indicates that associated rights are to be removed from the identifier that is prefixed by the dash. For example, if the identifier "-fred" is granted the "w" right, that indicates that the "w" right is to be removed from users matching the identifier "fred". Implementations need not support having identifiers which start with a dash in ACLs." IMP currently displays the identifier with a leading "-", but it should make it clear that this is a negative ACL and remove the "-" for display purposes. We will also need to add some online help so people know what negative ACLs are.