[Kolab-devel] Quota/usage of other user mailbox
Aleksander Machniak <[email protected]>
| Newsgroups | gmane.comp.kde.devel.kolab |
|---|---|
| Message-ID | <5594F3FD.90602__7662.69498640231$1435825180$gmane$org@kolabsys.com> |
If other user shares some folders with me I can see his quota/usage via IMAP (Roundcube shows this). I'm curious if this should be considered a security issue. I didn't check if the info is available when any folder is writeable or only readable, but I suppose cyrus does not differentiate that (or does it?) RFC2087 says: "The resource usage of other users is likely to be considered confidential information and should not be divulged to unauthorized persons". I'm not sure giving access to a folder is such an authorization. -- Aleksander Machniak Software Developer, Kolab Systems AG ------------------------------------------------------- PGP:19359DC1 - http://kolabsys.com - http://alec.pl