1 Topic by trepatudo

  • trepatudo
  • Member
  • Offline
  • Registered: 2015-08-20
  • Posts: 9

Topic: Folder Sharing

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.3
- Linux/BSD distribution name and version: CentOS 6
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):  MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? Yes
- Related log if you're reporting an issue:
====

When I share a folder with another user that user gets access to all my folders structure, they can't access the content but they can check all my tree and folder names which is a huge privacy violation.

Has anyone got the same?

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: Folder Sharing

How did you share a folder?

3 Reply by trepatudo (edited by trepatudo 2015-12-29 20:41:47)

  • trepatudo
  • Member
  • Offline
  • Registered: 2015-08-20
  • Posts: 9

Re: Folder Sharing

ZhangHuangbin wrote:

How did you share a folder?

SOGo, select folder -> right click -> sharing -> add user -> set permissions -> done.

EDIT: Where can I send you a private screenshot?

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: Folder Sharing

I cannot reproduce this issue. here's what i did to test it:

*) Login to SOGo as user 'postmaster@a.cn'
*) right click on 'Sent' folder
*) click 'Sharing'
*) click the green "+" button on the top-left corner
*) type another username, and SOGo will list all available mail accounts. single-click on username "test@a.cn", then click "Add" button in bottom-right corner, then click "Done" button. SOGo will show you two users in list: "test@a.cn", and "Any Authenticated User".
*) Double click "test@a.cn", SOGo will ask you to set the permission. I chose the first one: "Read mails from this folder", then click "Update" button in bottom-right corner.

That's all.

I then login to both SOGo and Roundcube webmail as "test@a.cn" user, both webmails correctly display the shared folder. See attached images:

Roundcube: http://postimg.org/image/x2a2ls1g3/
SOGo: http://postimg.org/image/pixwtpn2t/