Unauthorized users ...
 
Notifications
Clear all

Unauthorized users can still send email to Distribution Lists in Carbonio CE 26.6.0

1 Posts
1 Users
0 Reactions
23 Views
(@ali-sudarto)
New Member
Joined: 4 days ago
Posts: 1
Topic starter  

Hello Carbonio Team,

I have a question regarding the "Only these users" permission for Distribution Lists in Carbonio CE 26.6.0.

Environment

  • Carbonio CE 26.6.0

  • Single Server

  • Ubuntu 24.04

Configuration

I created a Distribution List and configured the following option:

Manage permissionsControl who can send emails to this distribution listOnly these users

I granted the sendToDistList permission only to zextras@aiue.store.

The permission appears to be correctly configured:

carbonio prov gg -t dl sales@aiue.store

Output:

target type  target name         grantee name         right
dl           sales@aiue.store    zextras@aiue.store   sendToDistList

The Distribution List has two members:

carbonio prov gdlm sales@aiue.store
user1@aiue.store
user2@aiue.store

What I observed

I tested sending an email from user3@aiue.store, which does not have the sendToDistList permission.

However, the email was accepted and successfully delivered to all members of the Distribution List.

The mail log shows:

postfix/qmgr: 309D2E133A: from=<user3@aiue.store>, size=1587, nrcpt=2

postfix/smtp: to=<user1@aiue.store>, orig_to=<sales@aiue.store>, status=sent

postfix/smtp: to=<user2@aiue.store>, orig_to=<sales@aiue.store>, status=sent

postfix/lmtp: to=<user1@aiue.store>, status=sent

postfix/lmtp: to=<user2@aiue.store>, status=sent

Additional Information

I tested the same configuration on Carbonio Release 26.3.2, and the "Only these users" permission worked as expected.

After performing a fresh installation of Carbonio CE 26.6.0, I observed that users who are not granted the sendToDistList permission can still send emails to the Distribution List.

Question

Is there any additional configuration required in Carbonio CE 26.6.0 to make the "Only these users" restriction work?

Or is this the expected behavior in Carbonio CE 26.6.0?

If anyone has experienced the same behavior or can provide guidance, I would appreciate your advice.

Thank you.

This topic was modified 4 days ago by Ali Sudarto

   
Quote