[ postfixadmin-Patches-3447294 ] Domain alias delete patch

[SourceForge.net <no...@so...>]

Patches item #3447294, was opened at 2011-12-01 09:40
Message generated for change (Comment added) made by christian_boltz
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=937966&aid=3447294&group_id=191583

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: wide (w1d3)
Assigned to: Nobody/Anonymous (nobody)
Summary: Domain alias delete patch

Initial Comment:
Hi,
in 2.3.4, only the global administrator is allowed to *delete* a domain alias, not the domain administrator - even though the domain administrator is allowed to *create* the alias.
The attached patch for delete.php solves the problem for me.. but 1) I'm not a PHP programmer and 2) I have only limited knowledge of postfixadmin source code. So I ask for a qualified review.. Thank you.

----------------------------------------------------------------------

>Comment By: Christian Boltz (christian_boltz)
Date: 2011-12-26 10:59

Message:
The original idea is/was to allow deleting an alias domain only if you have
permissions for both involved domains. It was never implemented with
exactly this permission check, therefore we still have the superadmin check
for it.

Your patch looks good, but it checks only the "from" domain, not the target
domain.

OTOH, I'm not sure if the permission check for the target domain really
makes sense - you can create and delete "normal" aliases without permission
checks on the target side, why should we do it differently for alias
domains? 
The only argument I can imagine is that you can't re-create the alias
domain if you don't have permissions on the target domain, but, well,
there's a reason why we have a "are you sure?" dialog before deletion
happens ;-)

What's your opinion on this?

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=937966&aid=3447294&group_id=191583