<?xml version="1.0" encoding="UTF-8"?>        <rss version="2.0"
             xmlns:atom="http://www.w3.org/2005/Atom"
             xmlns:dc="http://purl.org/dc/elements/1.1/"
             xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
             xmlns:admin="http://webns.net/mvcb/"
             xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
             xmlns:content="http://purl.org/rss/1.0/modules/content/">
        <channel>
            <title>
									Unauthorized users can still send email to Distribution Lists in Carbonio CE 26.6.0 - Carbonio General				            </title>
            <link>https://community.zextras.com/forum/carbonio-general-thread/pengguna-yang-tidak-berwenang-masih-dapat-mengirim-email-ke-daftar-distribusi-di-carbonio-ce-26-6-0/</link>
            <description>Zextras Community Discussion Board</description>
            <language>en-US</language>
            <lastBuildDate>Thu, 08 Oct 2026 10:05:31 +0000</lastBuildDate>
            <generator>wpForo</generator>
            <ttl>60</ttl>
							                    <item>
                        <title>Unauthorized users can still send email to Distribution Lists in Carbonio CE 26.6.0</title>
                        <link>https://community.zextras.com/forum/carbonio-general-thread/pengguna-yang-tidak-berwenang-masih-dapat-mengirim-email-ke-daftar-distribusi-di-carbonio-ce-26-6-0/#post-12522</link>
                        <pubDate>Wed, 22 Jul 2026 06:31:41 +0000</pubDate>
                        <description><![CDATA[Hello Carbonio Team,
I have a question regarding the &quot;Only these users&quot; permission for Distribution Lists in Carbonio CE 26.6.0.
Environment


Carbonio CE 26.6.0


Single Server

...]]></description>
                        <content:encoded><![CDATA[<p>Hello Carbonio Team,</p>
<p>I have a question regarding the <strong>"Only these users"</strong> permission for Distribution Lists in <strong>Carbonio CE 26.6.0</strong>.</p>
<h3>Environment</h3>
<ul>
<li>
<p>Carbonio CE 26.6.0</p>
</li>
<li>
<p>Single Server</p>
</li>
<li>
<p>Ubuntu 24.04</p>
</li>
</ul>
<h3>Configuration</h3>
<p>I created a Distribution List and configured the following option:</p>
<p><strong>Manage permissions</strong> → <strong>Control who can send emails to this distribution list</strong> → <strong>Only these users</strong></p>
<p>I granted the <strong>sendToDistList</strong> permission only to <strong><a href="mailto:zextras@aiue.store">zextras@aiue.store</a></strong>.</p>
<p>The permission appears to be correctly configured:</p>
<pre contenteditable="false"><code class="language-bash">carbonio prov gg -t dl sales@aiue.store
</code></pre>
<p>Output:</p>
<pre contenteditable="false"><code class="language-text">target type  target name         grantee name         right
dl           sales@aiue.store    zextras@aiue.store   sendToDistList
</code></pre>
<p>The Distribution List has two members:</p>
<pre contenteditable="false"><code class="language-bash">carbonio prov gdlm sales@aiue.store
</code></pre>
<pre contenteditable="false"><code class="language-text">user1@aiue.store
user2@aiue.store
</code></pre>
<h3>What I observed</h3>
<p>I tested sending an email from <strong><a href="mailto:user3@aiue.store">user3@aiue.store</a></strong>, which does not have the <strong>sendToDistList</strong> permission.</p>
<p>However, the email was accepted and successfully delivered to all members of the Distribution List.</p>
<p>The mail log shows:</p>
<pre contenteditable="false"><code class="language-text">postfix/qmgr: 309D2E133A: from=&lt;user3@aiue.store&gt;, size=1587, nrcpt=2

postfix/smtp: to=&lt;user1@aiue.store&gt;, orig_to=&lt;sales@aiue.store&gt;, status=sent

postfix/smtp: to=&lt;user2@aiue.store&gt;, orig_to=&lt;sales@aiue.store&gt;, status=sent

postfix/lmtp: to=&lt;user1@aiue.store&gt;, status=sent

postfix/lmtp: to=&lt;user2@aiue.store&gt;, status=sent
</code></pre>
<h3>Additional Information</h3>
<p>I tested the same configuration on <strong>Carbonio Release 26.3.2</strong>, and the <strong>"Only these users"</strong> permission worked as expected.</p>
<p>After performing a <strong>fresh installation of Carbonio CE 26.6.0</strong>, I observed that users who are not granted the <strong>sendToDistList</strong> permission can still send emails to the Distribution List.</p>
<h3>Question</h3>
<p>Is there any additional configuration required in Carbonio CE 26.6.0 to make the <strong>"Only these users"</strong> restriction work?</p>
<p>Or is this the expected behavior in Carbonio CE 26.6.0?</p>
<p>If anyone has experienced the same behavior or can provide guidance, I would appreciate your advice.</p>
<p>Thank you.</p>]]></content:encoded>
						                            <category domain="https://community.zextras.com/forum/carbonio-general-thread/">Carbonio General</category>                        <dc:creator>Ali Sudarto</dc:creator>
                        <guid isPermaLink="true">https://community.zextras.com/forum/carbonio-general-thread/pengguna-yang-tidak-berwenang-masih-dapat-mengirim-email-ke-daftar-distribusi-di-carbonio-ce-26-6-0/#post-12522</guid>
                    </item>
							        </channel>
        </rss>
		