Add possibility to allow/disallow main email, email alias and email forward form portal

[Josue-T]

PR related to: YunoHost/yunohost-portal#21

The problem

In Yunohost portal, user is always allowed to edit the mail alias and mail forward rule.

In some instance it could be a security issue to allow to edit by example the mail alias.

Solution

Add 3 new Yunohost settings to define if the user is allowed to edit

• the main email
• the mail alias
• the mail forward

PR Status

Tested locally it work

How to test

• Checkout the branch on yunohost and yunhost-portal
• Allow the 3 rules in "Tools" > "Yunohost settings" > "Portal" from admin
• Test that from the yunohost portal, the user can edit everything.
• Disallow the 3 rules in "Tools" > "Yunohost settings" > "Portal" from admin
• Test that from the yunohost portal, the user can't edit everything.

[zamentur]

On instances with a lot of users, the problem is that it's possible for a user to define alias like [email protected]... or to create emails near other user emails [email protected] even if [email protected] exists for an other user.

[zamentur]

I think this should already managed by ConfigPanel. It doesn't work without ?

[Josue-T]

The issue currently is that we store 2 config at different places. One global setting which is not accessible by the portal API and an other one more specific to the portal api which is accessible by the portal api (and which is specific to the domain).

The issue currently is that to me this setting is expected to be global it don't really make sens to be different between 2 domain as it's also a security thing. So I added this parameters in the global setting. But this can't be read by the config panel. So it's why I added one global config for the portal API (sychromized from the global setting) so the portal api can read the config.