[Tickets #10091] Re: ACLs courier-imap

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/10091
------------------------------------------------------------------------------
  Ticket             | 10091
  Updated By         | Michael Slusarz <slusarz at horde.org>
  Summary            | ACLs courier-imap
  Queue              | IMP
  Version            | Git master
  Type               | Bug
  State              | Feedback
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             | Michael Slusarz
------------------------------------------------------------------------------


Michael Slusarz <slusarz at horde.org> (2011-05-18 07:50) wrote:

> Everytime a user change an ACL, he gets the following error :
> Couldn't remove from user "administrators" these rights for the  
> mailbox "INBOX.Bug": kxte

This is an issue with Courier - it should ignore rights it doesn't  
know about.  So I will have to work around this.

> I think you should revert your patch and make the two ACL available  
> for modification (like it was perfectly working in IMP 4) to avoid  
> end users/admins asking about those errors.

NO NO NO.  As mentioned in RFC 4314, the CREATE and DELETE rights are  
badly broken in RFC 2086.  So a user should *never* be allowed to  
directly set those rights.  Instead, they should set the RFC 4314  
rights, which should be translated (as necessary) before sending to  
the server.