[SOLVED] "View mail" action in admin interface problem.

[jml75]

Hi all,

I have the following problem.

When I'm in the admin interface and I try, from the user list, to view a users mail box, i get a blank navigator page and the following javascript error :

Erreur de JavaScript in method ZaAccountListController.prototype._viewMailListener

0: P
1: e
2: r
3: m
4: i
5: s
6: s
7: i
8: o
9: n
10:  
11: r
12: e
13: f
14: u
15: s
16: é
17: e
18:  
19: d
20: '
21: o
22: b
23: t
24: e
25: n
26: i
27: r
28:  
29: l
30: a
31:  
32: p
33: r
34: o
35: p
36: r
37: i
38: é
39: t
40: é
41:  
42: U
43: n
44: n
45: a
46: m
47: e
48: d
49: C
50: l
51: a
52: s
53: s
54: .
55: f
56: i
57: l
58: e
59: n
60: a
61: m
62: e

My server runs Debian 3.1.

The problem started all of a sudden after I had to shutdown, move and restart the server.

I was using version 4.5.4 of Zimbra then and now I just upgraded to version 4.5.6 thinking that it might solve the problem but the problem persist.

Here is a screenshot of the error message.



Any idea?

Thanx !

[phoenix]

If this is with FF 2.0.0.5 then it's a bug and it's fixed in 4.5.7

[jml75]

Ok, Thanx!

I'll wait and see.

When will version 4.5.7 be available for download?

Thanx!

[phoenix]

I'm afraid that at the moment the answer is 'when it's ready' but it will be soon, there'll be an announcement in the forums.

[fajarpri]

Actually this is kind of error we want, because the management is not happy when they know that the admin can view users email so easily.

Is there anyway I can "force" this error to happen?

[phoenix]

Originally Posted by fajarpri

Is there anyway I can "force" this error to happen?

No, there isn't.

[matija]

If I can't disable this, is there at least something specific I can look for in the logs that will tell me the IP number of the admin, whose mail they wanted to read and the time?

The existamce of the easy way to read mail may make zimbra illegal under our privacy legislation, unless there is at the very least a good way of logging (who, when, what, with IP and time being a moderately reasonable substitute for who).

[Rich Graves]

The following appears in the appropriately named /opt/zimbra/log/audit.log

2007-08-07 07:41:14,850 INFO [http-7071-Processor49] [name=administrator@example.edu
;ip=10.10.1.33;ua=ZimbraWebClient - FF2.0 (Win)/undefined;] security - cmd=DelegateAuth; accountId=********-142c-4574-****-257afcfe6e5a; accountName=example1@example.edu;

It wouldn't be terribly difficult to write a script to notify the appropriate authorities that administrator is reading example1's email.

[matija]

It wouldn't be terribly difficult to write a script to notify the appropriate authorities that administrator is reading example1's email.

And that's exactly what we're going to do.

Thank you!