You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-dev@james.apache.org by "Rémi Kowalski (Jira)" <se...@james.apache.org> on 2020/02/05 16:25:00 UTC
[jira] [Created] (JAMES-3038) [SMTP] Allow a user to send an email
from on of her alias
Rémi Kowalski created JAMES-3038:
------------------------------------
Summary: [SMTP] Allow a user to send an email from on of her alias
Key: JAMES-3038
URL: https://issues.apache.org/jira/browse/JAMES-3038
Project: James Server
Issue Type: Improvement
Affects Versions: 3.5.0
Reporter: Rémi Kowalski
Currently James checks that the user connected matches the user is the From header of a mail being sent.
Instead, James should allow that the From header contains any alias of the connected user.
The alias the user can send from should be the one from its user alias and domain alias.
It should not be allowed to send from a group alias.
This also matches the current JMAP specification security considerations: [https://jmap.io/spec-mail.html#permission-to-send-from-an-address]
It is the equivalent for the SMTP protocol of https://issues.apache.org/jira/browse/JAMES-3032 which targeted JMAP.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org