acl: Add acl_globals_only setting The local dovecot-acl files aren't even attempted to be looked up if this is set. This is mainly useful to avoid unnecessary stat()s to dovecot-acl files that never exist.

acl-plugin: Make iterators more conforming The *_next functions return true/false, deinit will report errors and end result.

global: unsigned int:1 -> bool:1 perl -i -pe 's/unsigned int ([^,:;]+):1;/bool $1:1;/' **/*.[ch]

acl: acl_object_list_*() now duplicates rights at init to avoid them changing during listing. Depending on the calling code the acl_object could have been refreshed during the listing and caused bugs/crashes. This fixes a crash at least in mailbox deletion during attribute deletion where iter->idx was higher (2) than the number of rights at the time (0).

acl plugin: Added an alternative global ACL file that can contain mailbox patterns. Instead of pointing the global ACL path to a directory use a file instead. The file format is "<mailbox pattern> <normal ACL line>". Most importantly this can be used to specify default ACLs for namespaces. The mailbox pattern uses "*" and "?" wildcards currently. I'm not sure if I should still change them to IMAP "*" and "%" wildcards. That would make the behavior more complex ("%" depends on hierarchy separator), slightly slower and quota code is already also using the */? wildcards..

acl: Moved acl_rights array from vfile-specific code to generic struct acl_object.

acl: More code cleanups.

acl: Code cleanup by moving around the code and renaming functions.

acl: Optionally get default ACL's for private/shared namespaces from user's INBOX. This probably should be the default always, but better not break anyone's existing setup until v2.3.0. So for now there's a setting for this: plugin { acl_defaults_from_inbox = yes }

acl: Added ACL checks for attributes. Added ACL <-> mailbox attribute mapping. The ACL checks will be useful once IMAP METADATA extension is finished. The mapping is used by dsync to sync ACLs via generic attribute syncing.

acl: Added acl_backend_nonowner_lookups_rebuild()

acl: Added acl_backend_nonowner_lookups_rebuild()

acl: Added doveadm plugin supporting acl get/set/rights/debug commands.

acl: Added doveadm plugin supporting acl get/set/rights commands.

Initial commit for making mail_storage:mailbox_list to be from 1:1 to n:n. This will allow namespaces to share the same storage and a single namespace to have multiple storages (multiple mailbox formats). Neither works currently, and this commit probably breaks some things. --HG-- branch : HEAD

imap-acl: GETACL: Convert "owner" to the actual username whenever possible. --HG-- branch : HEAD

Initial support for LISTing users with shared mailboxes. --HG-- branch : HEAD

acl: When lookup ACLs are changed, make sure dovecot-acl-list is updated. --HG-- branch : HEAD

acl: Default owner rights override anyone/authenticated/group rights. --HG-- branch : HEAD

Added IMAP ACL commands with ability to modify ACLs. Based on patch by Bernhard Herzog and Sascha Wilde. --HG-- branch : HEAD

acl: Fixed handling 'k' right. Although box/child creation was prevented, box/child/child wasn't. --HG-- branch : HEAD

Changed .h ifdef/defines to use <NAME>_H format. --HG-- branch : HEAD

Create dovecot-acl-list file that lists all mailboxes where non-owner has lookup right. Use the file when listing mailboxes in shared/public namespace. --HG-- branch : HEAD

acl_backend is now tied to mailbox_list instead of mail_storage. --HG-- branch : HEAD

If debug is enabled, log some debugging messages. Also cleaned up the code bit, and made "acl = vfile" not require ":" after the "vfile". --HG-- branch : HEAD

If .DEFAULT file exists in global ACL root directory, use it as the default ACLs for all mailboxes. --HG-- branch : HEAD

Don't keep acl_objects permanently in memory. Moved cache validity information into cache records. Some other cleanups and fixes. --HG-- branch : HEAD

Added initial support for ACLs. Currently supports reading the ACLs from files. Since no proper support for shared folders exist yet, this is mostly intended to be used only for preventing users from fully accessing the mailboxes they'd otherwise have full access to. It anyway does support "master user" having different ACLs to mailboxes. --HG-- branch : HEAD