Ken Murchison skrev: > Jorey Bump wrote: >> Anders Norrbring wrote, at 10/07/2007 07:06 AM: >>> Is there a way to disable a specific user's access to POP and IMAP in >>> Cyrus? I still want the mail to be delivered to the mailboxes (done >>> via LMTP), but I would like to turn off the user from getting the mail. >>> >>> In case you wonder, it's for a pay system, so if they don't pay, the >>> don't get access. >> >> I would imagine that the Cyrus way would be to change the ACL on the >> user's mailbox, using cyradm (or Cyrus::IMAP::Shell, in a perl script): >> >> List ACLs: >> >> localhost> lam user.bob >> bob lrswipkxtecda >> >> Delete ACLs: >> localhost> dam user.bob bob read >> >> List again, to confirm ACLs: >> localhost> lam user.bob >> >> >> Now bob can't read his INBOX, and will get a message like the >> following when he tries (this is from Thunderbird): > > This won't work since Cyrus implicitly gives user's at least 'lca' > rights on their own mailboxes, regardless of the explicitly granted ACL. > > Disabling the authentication credentials is the best way to do this. > Actually, setting the ACL to just 'l' makes a pretty good job. The boxes are there, you can see them, but not read them. Nevertheless, it creates a rather unnecessary load on the server to set and reset ACL's on all mailboxes. For now, I solved it with a field in the MySQL user database, and then check for that field as well when the user logs in. That just disables access and doesn't force a new password for a user who forget to pay. ;) Anders. ---- Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
