SYNOPSIS

maildiracl {-reset} {maildir}

maildiracl {-list} {maildir} {INBOX[.folder]}

maildiracl {-set} {maildir} {INBOX[.folder]} {[-]identifier} {[+/-]rights}

maildiracl {-delete} {maildir} {INBOX[.folder]} {[-]identifier}

maildiracl {-compute} {maildir} {INBOX[.folder]} {identifier...}

DESCRIPTION

maildiracl

ACL overview

ACLs provide a fine-grained mechanism for controlling access to shared folders. ACLs may be used to specify, for example, that user1 may only open and read the messages in the folder; and user2 can not only do that, but also delete messages, and create subfolders.

Each folder maintains its own individual access control list, that specifies who can do what to the folder. An ACL is a list of "identifier" and "rights" pairs. Each "identifier" and "rights" pair means that an entity called "identifier" (using the UTF-8 character set) is allowed to do "rights" on this folder. "rights" consists of one or more letters, each letter signifies a particular action:

a

identifier may modify this folder's ACLs.

c

identifier may create subfolders of this folder (this includes renaming another folder as this folder's subfolders).

e

identifier may remove deleted messages from this folder.

i

identifier may add messages to this folder (either uploading them one by one, or copying messages from another folder).

l

identifier may actually see that this folder exists. If identifier does not have the "l" right on this folder, the folder is effectively invisible to identifier.

r

identifier may open this folder. Note that if identifier knows the name of this folder, it can open it even if identifier does not the "l" right on this folder.

s

identifier may mark messages in this folder as seen, or unseen.

t

identifier may mark messages in this folder as deleted, or undeleted.

w

identifier may change other status flags of messages in this folder. May also add or remove custom keywords on individual messages.

x

identifier may delete this folder (which includes renaming this folder as another mailbox's subfoler.

Negative rights

An ACL entry of "-identifier" and "rights" is called a "negative right", which explicitly removes "rights" from "identifier". More than one "identifier" is usually used to determine the actual rights someone has for the given folder. The actual access rights are determined by taking all rights from all applicable identifier, than subtracting any negative rights, as specified in the following section.

owner          aceilrstwx
anyone         lr
user=john      w
-user=mary     r
administrators aceilrstwx

This access control list specifies that the folder's owner has complete control over the mailbox (as well as the administrators, which have complete access to every folder); everyone else can see it and open it, except for "mary" who can see that the mailbox exists, but can't open it; additionally, "john" can change the status and keywords of individual messages (but not mark them as deleted/undeleted or seen/unseen, which requires additional rights).

OPTIONS

maildiracl -reset maildir

IRREVOCABLE ACCESS RIGHTS

The owner of the mailbox must always have the "a" amd "l" access rights. The administrators group must always have all access rights to all folders. Attempts to set access control lists, that do not include these minimum access rights, will be rejected.

AUTHOR

Sam Varshavchik

Author

NOTES

1.

maildirmake(1)

[set $man.base.url.for.relative.links]/maildirmake.html

2.

RFC 2086

http://www.rfc-editor.org/rfc/rfc2086.txt

3.

maildirkw(1)

[set $man.base.url.for.relative.links]/maildirkw.html