[jira] [Closed] (JAMES-4134) Delegation: auditability of user action when sending email

     [ https://issues.apache.org/jira/browse/JAMES-4134?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Benoit Tellier closed JAMES-4134.
---------------------------------
    Resolution: Fixed

Merged

> Delegation: auditability of user action when sending email
> ----------------------------------------------------------
>
>                 Key: JAMES-4134
>                 URL: https://issues.apache.org/jira/browse/JAMES-4134
>             Project: James Server
>          Issue Type: Improvement
>          Components: JMAP, Remote Delivery, SMTPServer
>            Reporter: Benoit Tellier
>            Assignee: Antoine Duprat
>            Priority: Major
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> h3. Why ?
> James currently allow delegation however there is no way currently to know, upon delegated user, as end user receiving an email, who did conduct the action.
> While performing research on other topics I did discover RFC-4954 adds a convenient AUTH parameter alongside MAIL FROM denotting the user that was really connected.
> h3. How?
> Leverage AUTH MAIL FROM parameter to set it to the real user upon submission.
> Accept but validate it when coming from third party systems
> Add convenience logs.
> Have this information carried over as a mail attribute.
> And finally add a way to move this envelope information into headers 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)