[jira] [Commented] (JAMES-3038) [SMTP] Allow a user to send an email from on of her alias

["Raphael Ouazana (Jira)" <se...@james.apache.org>]

    [ https://issues.apache.org/jira/browse/JAMES-3038?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17030811#comment-17030811 ] 

Raphael Ouazana commented on JAMES-3038:
----------------------------------------

I think this should be configurable. Unless there is any SMTP RFC stating that this should be the case.

 

For JMAP there is no such debate because it's included in the RFC.

> [SMTP] Allow a user to send an email from on of her alias
> ---------------------------------------------------------
>
>                 Key: JAMES-3038
>                 URL: https://issues.apache.org/jira/browse/JAMES-3038
>             Project: James Server
>          Issue Type: Improvement
>    Affects Versions: 3.5.0
>            Reporter: Rémi Kowalski
>            Priority: Major
>
> Currently James checks that the user connected matches the user is the From header of a mail being sent.
>  Instead, James should allow that the From header contains any alias of the connected user.
> The alias the user can send from should be the one from its user alias and domain alias.
> It should not be allowed to send from a group alias.
>  This also matches the current JMAP specification security considerations: [https://jmap.io/spec-mail.html#permission-to-send-from-an-address]
>  
> It is the equivalent for the SMTP protocol of https://issues.apache.org/jira/browse/JAMES-3032 which targeted JMAP.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org