[Tickets #4488] NEW: Deal with "negative rights" in IMAP ACLs

[bugs@bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: https://dev.horde.org/horde/whups/ticket/?id=4488
-----------------------------------------------------------------------
 Ticket             | 4488
 Created By         | Matt Selsky <selsky at columbia.edu>
 Summary            | Deal with "negative rights" in IMAP ACLs
 Queue              | IMP
 Version            | HEAD
 Type               | Enhancement
 State              | Accepted
 Priority           | 1. Low
 Owners             | 
-----------------------------------------------------------------------


Matt Selsky <selsky at columbia.edu> (2006-10-04 16:10) wrote:

If an identifier is prefixed with a "-", then it is a negative ACL.  From
RFC 2086:

"When an identifier in an ACL starts with a dash ("-"), that indicates
that associated rights are to be removed from the identifier that is
prefixed by the dash.  For example, if the identifier "-fred" is granted
the "w" right, that indicates that the "w" right is to be removed from
users matching the identifier "fred".  Implementations need not support
having identifiers which start with a dash in ACLs."

IMP currently displays the identifier with a leading "-", but it should
make it clear that this is a negative ACL and remove the "-" for display
purposes.  We will also need to add some online help so people know what
negative ACLs are.