Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

shared mailbox in Snappy Mail, the mailbox unintentionally becomes accessible to other user accounts #1893

Open
RGES-17 opened this issue Jan 15, 2025 · 0 comments

Comments

@RGES-17
Copy link

RGES-17 commented Jan 15, 2025

Summary
When configuring a shared mailbox in Snappy Mail, the mailbox unintentionally becomes accessible to other user accounts.

Initial Hypothesis
It appeared that some general settings in Snappy Mail’s admin panel or Nextcloud’s configuration might be causing shared sessions or unexpected behavior. Various settings (language preferences, multiple identities, additional accounts) were adjusted, but the problem persisted.

Key Observation
Initially, mailbox configuration was done using the Nextcloud Impersonate plugin, allowing an administrator to temporarily switch to another user’s account. This process caused the mailbox to be visible in other accounts.

Test Without Impersonate
When the mailbox was configured directly from the end user’s account, without using Impersonate, the issue did not occur:

  • Each user only sees mailboxes explicitly assigned to them.
  • No unexpected sharing or session crossover happens.

Conclusion and Final Hypothesis
Using Impersonate seems to result in mailbox settings being saved in a way that affects other accounts. This could be due to a shared configuration session or incorrectly assigned user data.

I am a French-speaking user, and I am not used to using gihub. I share with you the analysis of an "abnormal" behavior of snappy mail, with the Impersonate plugin, which I used to open access to mailboxes on nextcloud accounts.

I don't know if there is a solution to this bug yet.

That said, thank you for the tools and the work accomplished.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant