From 61918ed18fa0b69413c54248d77d0117f3f0cd44 Mon Sep 17 00:00:00 2001 From: Zhang Huangbin Date: Sat, 6 Aug 2016 23:21:10 +0800 Subject: [PATCH] Add list of Dovecot ACL permissions in en_US/howto/public.folder.md. --- en_US/howto/public.folder.md | 28 ++++++++++--- html/public.folder.html | 80 +++++++++++++++++++++++++++++++++--- 2 files changed, 98 insertions(+), 10 deletions(-) diff --git a/en_US/howto/public.folder.md b/en_US/howto/public.folder.md index 42834eba..91129614 100644 --- a/en_US/howto/public.folder.md +++ b/en_US/howto/public.folder.md @@ -74,8 +74,8 @@ Now let's create required folder and our first shared folder `TestFolder`. ``` mkdir -p /var/vmail/public/.TestFolder -chown -R vmail:vmail /var/vmail/public -chmod -R 0700 /var/vmail/public +chown -R vmail:vmail /var/vmail/public/.TestFolder +chmod -R 0700 /var/vmail/public/.TestFolder ``` !!! note "Notes" @@ -108,12 +108,30 @@ You can see output like below, no access control at all: Username ID Global Rights ``` -With shell command below, we grant `lookup`, `read`, `write`, `insert`, -`delete`, `expunge` and `create` (sub-directory) permissions to user +Below is list of all available permissions. Please check [Dovecot web +site](http://wiki2.dovecot.org/ACL) for more details or update. + +!!! note "Permissions" + + Permission name (short) | Permission name (full) | Comment + ---|---|--- + l | lookup | Mailbox is visible in mailbox list. Mailbox can be subscribed to. + r | read | Mailbox can be opened for reading. + w | write | Message flags and keywords can be changed, except `\Seen` and `\Deleted` + s | write-seen | `\Seen` flag can be changed + t | write-deleted | `\Deleted` flag can be changed + i | insert | Messages can be written or copied to the mailbox + p | post | Messages can be posted to the mailbox by LDA, e.g. from Sieve scripts + e | expunge | Messages can be expunged + k | create | Mailboxes can be created (or renamed) directly under this mailbox + x | delete | Mailbox can be deleted + a | admin | Administration rights to the mailbox (currently: ability to change ACLs for mailbox) + +With shell command below, we grant some permissions to user `postmaster@test.com` (again, this user is hosted on same server): ``` -doveadm acl set -A "Public/TestFolder" "user=postmaster@test.com" lookup read write insert delete expunge create +doveadm acl set -A "Public/TestFolder" "user=postmaster@test.com" lookup read write write-seen write-deleted insert delete expunge create ``` Check the ACl with `doveadm` again: diff --git a/html/public.folder.html b/html/public.folder.html index 79b922b9..1011fc0d 100644 --- a/html/public.folder.html +++ b/html/public.folder.html @@ -91,8 +91,8 @@ please also remove the comment mark in below line in dovecot.conf:<

Now let's create required folder and our first shared folder TestFolder.

mkdir -p /var/vmail/public/.TestFolder
-chown -R vmail:vmail /var/vmail/public
-chmod -R 0700 /var/vmail/public
+chown -R vmail:vmail /var/vmail/public/.TestFolder
+chmod -R 0700 /var/vmail/public/.TestFolder
@@ -124,10 +124,80 @@ folder first with command doveadm acl get:

Username ID Global Rights
-

With shell command below, we grant lookup, read, write, insert, -delete, expunge and create (sub-directory) permissions to user +

Below is list of all available permissions. Please check Dovecot web +site for more details or update.

+
+

Permissions

+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Permission name (short)Permission name (full)Comment
llookupMailbox is visible in mailbox list. Mailbox can be subscribed to.
rreadMailbox can be opened for reading.
wwriteMessage flags and keywords can be changed, except \Seen and \Deleted
swrite-seen\Seen flag can be changed
twrite-deleted\Deleted flag can be changed
iinsertMessages can be written or copied to the mailbox
ppostMessages can be posted to the mailbox by LDA, e.g. from Sieve scripts
eexpungeMessages can be expunged
kcreateMailboxes can be created (or renamed) directly under this mailbox
xdeleteMailbox can be deleted
aadminAdministration rights to the mailbox (currently: ability to change ACLs for mailbox)
+
+

With shell command below, we grant some permissions to user postmaster@test.com (again, this user is hosted on same server):

-
doveadm acl set -A "Public/TestFolder" "user=postmaster@test.com" lookup read write insert delete expunge create
+
doveadm acl set -A "Public/TestFolder" "user=postmaster@test.com" lookup read write write-seen write-deleted insert delete expunge create
 

 
 
Check the ACl with doveadm again: