Groups for shared folders

[Alex Kent]

Hi Gunnar,

Thanks for your advice on using cyradm for seeing what was going on. I 
have found a work-around on 2.2.0 so that I'm able to use groups 
(distribution lists) to set permissions on shared folders.

As people have been stating, I didn't need to append 'group:' to the 
front of the email address used. The system did that for me fine.

With the web admin panel configured to give permission for 
UID/email/GID="staff-group at starfields.net" and  permissions='all':

localhost> lam shared.test at starfields.net
group:staff-group at starfields.net p
manager lrswipkxtecda

So clearly, the 'all' permissions weren't getting through to the imap 
server.

So I played with adding permissions manually to the web admin folder:

staff-group at starfields.net = "read/post"
staff-group at starfields.net = "append"
staff-group at starfields.net = "write"

And this now results in:

localhost> lam shared.test at starfields.net
group:staff-group at starfields.net lrswipted
manager lrswipkxtecda

This allows me to subscribe to the shared mail folder using thunderbird, 
and add mails to it. I'm guessing I should be able to assign a public 
email address to it in the normal way.

Thanks for everyones help in finding this work-around without me having 
to compile/upgrade anything!

Best wishes,

Alex

> ------------------------------------------------------------------------
>
> Subject:
> Re: Groups for shared folders
> From:
> Gunnar Wrobel <wrobel at pardus.de>
> Date:
> Wed, 14 Jan 2009 16:56:50 +0100
> To:
> kolab-users at kolab.org
>
> To:
> kolab-users at kolab.org
>
>
> Quoting Alex <lbf at dragonrising.com>:
>
>> Hi Bernhard,
>>
>> Thanks so much for the assistance, though I'm still getting stuck.
>>
>> I've:
>>
>> 1) Gone to distribution lists and create new list:
>>
>> List name: staff-group at mydomain.com
>> Members: alex.kent at mydomain.com
>> Hidden: unchecked
>>
>> 2) Created a shared folder:
>>
>> Folder name: staff-shared at mydomain.com
>> Folder type: mails
>> Permission for UID/email/GID: "group:staff-group at mydomain.com"
>> Permission='all'
>>
>> This generates the error:
>>
>> "No UID or GID group:staff-group at mydomain.com"
>>
>> It does accept the UID if I drop "group:" eg:
>
> Indeed, you don't need the "group:" prefix. The mail address is enough 
> to identify that this is a group.
>
> I tested that the whole procedure works fine on the recent 
> Kolab-Server-2.2.1-beta-1 release but I believe it should also work on 
> 2.2.0 as I don't think we changed anything in that area.
>
> Can you check if you see the right permissions on the shared folder 
> when using the cyradm tool (/kolab/bin/cyradm).
>
> This is the example session when I tested this:
>
> /kolab/bin/cyradm -u manager localhost
> Password:
> example.com> lm
> shared.shared at example.com (HasNoChildren)
> user/1 at example.com (HasNoChildren)
> user/2 at example.com (HasNoChildren)
> example.com> lam shared.shared at eample.com
> group:group at example.com lrswipteda
> anyone lrswipteda
> manager lrswipkxtecda
>
> You see that here the permission is marked with 
> "group:group at example.com lrswipteda". The "group:" prefix is cyrus 
> specific. Both users (1 at example.com com and 2 at example.com" are members 
> of "group at example.com". Both see the shared folder (tested via the 
> Kolab web client).
>
> If it still does not work for you I could test the same procedure on 
> 2.2.0.
>
> Cheers,
>
> Gunnar
>
>> Permission for UID/email/GID: "staff-group at mydomain.com" 
>> Permission='all'
>>
>> But this doesn't seem to give me "alex.kent at mydomain.com" access to the
>> folder.
>>
>> Am I getting closer?
>>
>> Best wishes,
>>
>> Alex Kent
>>
>>
>>
>>
>>>
>>> ------------------------------------------------------------------------ 
>>>
>>>
>>> Subject:
>>> Re: Groups for shared folders
>>> From:
>>> Bernhard Reiter <bernhard at intevation.de>
>>> Date:
>>> Mon, 12 Jan 2009 15:32:56 +0100
>>> To:
>>> kolab-users at kolab.org
>>>
>>> To:
>>> kolab-users at kolab.org
>>>
>>>
>>> On Sonntag, 11. Januar 2009, Alex wrote:
>>>
>>>> I'm loving kolab, but need a few pointers giving a group of users 
>>>> access
>>>> to a shared folder. I can at the moment give access to everyone, 
>>>> nobody
>>>> or a specific person.
>>>>
>>>
>>> You can use server distribution lists.
>>> (Use the Webadmin for your Kolab Server go to "distribution list",
>>> add one with all your users and then use "group:YOURLISTNAME"
>>> as UID to give rights to for the folder.
>>>
>>>
>>>> Having searched kolab-users, I've seen a post which seemed to indicate
>>>> the following:
>>>>
>>>> 1) Create a new user of account type 'Group Account'
>>>>
>>>> 2) Add users to this group account by adding their UID to the
>>>> 'Email-Delegates' field of the group account.
>>>>
>>>
>>> Email-Delegates _only_ is about who can use the From: adress
>>> for the Account in question. So this does not help.
>>>
>>>
>>>> 3) Create a shared folder, giving the group accounts UID 'post'
>>>> permissions.
>>>>
>>>
>>> Post is about incoming emails, so wrong tree. :)
>>>
>>>
>>>> My Mozilla Thunderbird client does not see the new shared folder.
>>>> Am I on the right lines here?
>>>>
>>>
>>> You were'nt. ;)
>>>
>>>
>>>
>>
>> _______________________________________________
>> Kolab-users mailing list
>> Kolab-users at kolab.org
>> https://kolab.org/mailman/listinfo/kolab-users
>>