[Kolab-devel] [issue2517] group accounts lead to more rights than necessary for the "calender" user
kolab-issues at intevation.de
Mon Mar 3 17:47:15 CET 2008
New submission from Bernhard Reiter <bernhard at intevation.de>:
Kolab Server 2.2-rc1+snapshot:
Creating a group account will give the calender user access
to the initial folder in cyrus.
So any other folder created will also have full access rights
to the calender user. As the calender user will only be there
to handle incoming iTip emails and write into the default calender folder,
the user has way to many rights.
In order of the defense in depth principle, the calender user should
end up having only the rights for the default calender folder.
nosy: bernhard, bh, jan, thomas, wrobel
title: group accounts lead to more rights than necessary for the "calender" user
Kolab issue tracker <kolab-issues at intevation.de>
More information about the devel