## Nikola Milutinovic ([EMAIL PROTECTED]):
> I mean, I'm not thrilled with having "anyone" or "anonimous"
> authentications authorized to post to such folders or to public shared
> folders. True, it would take some effort to abuse it (if it is even
> possible), but I'd still like it out of the picture. I would like the
> message submission via LMTP to be authenticated (automatically?) as user
> "cyrus", while those who connect to the IMAP server cannot post to
> public folders.
Read the RFC. "p" is "send mail to submission address for mailbox"
while putting messages into a folder via IMAP needs "i" rights
("perform APPEND, COPY into mailbox").
So just give "anyone" "p" and be happy with that :)
Regards,
Christoph
--
Spare Space
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
