Peter via Postfix-users skrev den 2024-06-18 04:08:
On 18/06/24 13:00, Jeff Peng via Postfix-users wrote:
On 2024-06-18 07:30, Peter via Postfix-users wrote:
On 17/06/2024 17:28, Paul Schmehl wrote:
though it's a big offtopic, may I ask that, for roundcube, how to stop
users adding their own sender identity? for example, when user login
as u...@domain.com, they can add the identity in roundcube interface
as f...@bar.com.
I don't know off the top of my head but roundcube is not necessarily
the right place to do this. Consider that someone can bypass roundcube
and connect to the submission port directly then any limitations you
put in roundcube won't matter. It's better to put the limitations in
postfix and dovecot so that no matter how the user connects they will
be limited.
// Set identities access level:
// 0 - many identities with possibility to edit all params
// 1 - many identities with possibility to edit all params but not email
address
// 2 - one identity with possibility to edit all params
// 3 - one identity with possibility to edit all params but not email
address
// 4 - one identity with possibility to edit only signature
$config['identities_level'] = 0;
is what is possible in roundcube
this is just not make any limit when there is other muas then roundcube
for solving in roundcube it could be identities confimed with send a
email to new email, its just not worth
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org