Hi,

--On Thursday, February 14, 2002 11:39 PM -0800 Don Jackson
<[EMAIL PROTECTED]> wrote:

> Is there a way to create a user that has access to the unseen msg count
> for other users, but nothing else?  (eg, would not be able to actually
> read any users messages). That way if the password was compromised, the
> only thing that could be done with it is to find out how many unseen
> msgs other people have.  Is it possible to change from one user's
> mailbox to another users's mail via the IMAP protocol?

The STATUS command does allow you to get unseen count on any mailbox to
which you have the 'r' ACL right - it does not require you to actually
select the mailbox to get the count. Unfortunately the 'r' right does allow
that user to also open the mailbox in read-only mode so the message data
would be exposed. If having access to the message data were not an issue,
what you could do is setup a user that has 'r' rights to each of the
mailboxes of other users you want to examine, and then you just issue
status commands for those mailboxes to get the unseen count.

-- 
Cyrus Daboo

Reply via email to