Peter via Postfix-users skrev den 2024-06-18 04:08:
On 18/06/24 13:00, Jeff Peng via Postfix-users wrote:
On 2024-06-18 07:30, Peter via Postfix-users wrote:
On 17/06/2024 17:28, Paul Schmehl wrote:

though it's a big offtopic, may I ask that, for roundcube, how to stop users adding their own sender identity? for example, when user login as u...@domain.com, they can add the identity in roundcube interface as f...@bar.com.

I don't know off the top of my head but roundcube is not necessarily the right place to do this. Consider that someone can bypass roundcube and connect to the submission port directly then any limitations you put in roundcube won't matter. It's better to put the limitations in postfix and dovecot so that no matter how the user connects they will be limited.

// Set identities access level:
// 0 - many identities with possibility to edit all params
// 1 - many identities with possibility to edit all params but not email address
// 2 - one identity with possibility to edit all params
// 3 - one identity with possibility to edit all params but not email address
// 4 - one identity with possibility to edit only signature
$config['identities_level'] = 0;

is what is possible in roundcube

this is just not make any limit when there is other muas then roundcube

for solving in roundcube it could be identities confimed with send a email to new email, its just not worth


_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to