[Jboss-dev-forums] [Design of Mail Services] - new thoughts on security and mailbox structure

[<aco...@jb...>]

Guys,

What do you think of this?

Mailbox support should be refactored such that folders look like this

joe/
    inbox/
    foo/
andy/
    inbox/
    spam/
    foo-doo/

UserRepository will now need to support properties for users:
String user = "andy";
String password =  "yeahright";
boolean b = ur.authenticate(user, password);
boolean b = ur.authorize(user, "andy-inbox-create");
String s = ur.defaultFolder(user);

(s.equals("andy/inbox") == true)

POP should be bound to defaultFolder.  Default listeners will route SMTP mail to the defaultFolder.

Mailbox will need to change dramatically:
folders can contain other folders.
folders contain attributes:
create-roles
write-roles
delete-roles

roles are additive, meaning if andy/inbox has two roles for create-roles (andy-inbox-create, inbound-smtp-create) then users 
having either role will be automatically able to create mails in that mail box.  

UserRepository should have an "unauthenticatedUser" which has some default roles (inbound-smtp-create).  SMTP should check this
user with no/any password when a user runs any supported command after HELO except for AUTH.

Any way we could do this using aspects or chains?


View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3886795#3886795

Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3886795