[Kolab-devel] [issue2517] group accounts lead to more rights than necessary for the "calender" user

[Bernhard Reiter]

New submission from Bernhard Reiter <bernhard at intevation.de>:

Kolab Server 2.2-rc1+snapshot:  
  
Creating a group account will give the calender user access  
to the initial folder in cyrus.  
  
So any other folder created will also have full access rights  
to the calender user. As the calender user will only be there  
to handle incoming iTip emails and write into the default calender folder,  
the user has way to many rights.   
In order of the defense in depth principle, the calender user should 
end up having only the rights for the default calender folder.

----------
assignedto: thomas
messages: 13853
nosy: bernhard, bh, jan, thomas, wrobel
priority: bug
status: unread
title: group accounts lead to more rights than necessary for the "calender" user
topic: server
___________________________________________________
Kolab issue tracker <kolab-issues at intevation.de>
<https://www.intevation.de/roundup/kolab/issue2517>
___________________________________________________