kolab-cyrus acl problem

[Christian Rößler]

Hallo,

I have got a bit of a strange cyrus acl problem here. Let's day I have a
domain called domainintern.de, and a shared folder called shared.folder.

Beneath that shared folder I made a sub folder test, so the full name of
that shared folder will be shared.folder/test at domainintern.de.

The acl list will be:
localhost> lam shared.folder/test at domainintern.de
| anyone lrswipteda
| manager lrswipkxtecda

Then I add a 'cyrus user' called archiv (as manager, with kolab web
interface: archiv at domainintern.de):
sam shared.folder/test at domainintern.de lrswipkxtecda
so the acl list will look like that:
localhost> lam shared.folder/test at domainintern.de
| archiv lrswipkxtecda
| anyone lrswipteda
| manager lrswipkxtecda

(notice same acl for manager and archiv)

Well, now to cm'ing a subfolder:
as manager, no problem:
localhost> cm shared.folder/test/subfolder at domainintern.de
localhost> lm shared.folder/test at domainintern.de
| shared.folder/test at domainintern.de (\HasNoChildren)

but as user archiv:
localhost> cm shared.folder/test/subfolder
| createmailbox: Permission denied

also a
localhost> cm shared.folder/test/subfolder at domainintern.de
| createmailbox: Permission denied
fails.


...anyway, a (user archiv)
localhost> cm INBOXT/test
works fine:
localhost> lam INBOX
| archiv at domainintern.de lrswipkxtecda
localhost> cm INBOX/test
localhost> lm INBOX/test
| INBOX/test (\HasNoChildren)

How comes? How are shared folders different? Am I missing something here?

Best regards & thanks,
Christian