Peter via Postfix-users skrev den 2024-06-18 04:08:
On 18/06/24 13:00, Jeff Peng via Postfix-users wrote:
On 2024-06-18 07:30, Peter via Postfix-users wrote:
On 17/06/2024 17:28, Paul Schmehl wrote:

though it's a big offtopic, may I ask that, for roundcube, how to stop users adding their own sender identity? for example, when user login as [email protected], they can add the identity in roundcube interface as [email protected].

I don't know off the top of my head but roundcube is not necessarily the right place to do this. Consider that someone can bypass roundcube and connect to the submission port directly then any limitations you put in roundcube won't matter. It's better to put the limitations in postfix and dovecot so that no matter how the user connects they will be limited.

// Set identities access level:
// 0 - many identities with possibility to edit all params
// 1 - many identities with possibility to edit all params but not email address
// 2 - one identity with possibility to edit all params
// 3 - one identity with possibility to edit all params but not email address
// 4 - one identity with possibility to edit only signature
$config['identities_level'] = 0;

is what is possible in roundcube

this is just not make any limit when there is other muas then roundcube

for solving in roundcube it could be identities confimed with send a email to new email, its just not worth


_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to