On 7.3.2012, at 18.39, Ed W wrote: >> 5. No one other than a designated user or users (Master User(s)? Users in a >> specified Group?) can delete any messages in this account, in any of the >> folders. > > Have them delivered with only read permissions on the physical files? (Bet > that doesn't work very well in practice or other than maildir...)
The maildir file's read permission doesn't matter, the parent cur/ or new/ directory's write permission matters. And removing those prevents moving mails from new/ to cur/ and from keeping the flag states in the filename.. Not very good.