Page 1 of 6 123 ... LastLast
Results 1 to 10 of 52

Thread: Disable Admin View Mail

  1. #1
    percibal is offline Starter Member
    Join Date
    Apr 2006
    Posts
    1
    Rep Power
    9

    Default Disable Admin View Mail

    I'm using Zimbra Open Source to manage multi-domain account, and I have added some user to the "admin" group so they can enter to the Admin Console (7071 port).

    My big problem is that this other administrator user CAN view all mail inbox and all the messages for that users. I need that only the other user administrator can add/modify/delete email account but not view client private messages.

    How can I disable the "View Mail" Option from the Admin Console (7071)?

    Thanks for your time.

  2. #2
    KevinH's Avatar
    KevinH is offline Expert Member
    Join Date
    Aug 2005
    Location
    San Mateo, CA
    Posts
    4,789
    Rep Power
    18

    Default

    The OSS Edition doesn't allow per-domain admins. You can get this feature in the Network Edition. For the OSS Edition you need to keep a single admin if security is important.
    Looking for new beta users -> Co-Founder of Acompli. Previously worked at Zimbra (and Yahoo! & VMware) since 2005.

  3. #3
    dotslashroot is offline Intermediate Member
    Join Date
    Apr 2006
    Posts
    23
    Rep Power
    8

    Default

    Quote Originally Posted by KevinH
    The OSS Edition doesn't allow per-domain admins. You can get this feature in the Network Edition. For the OSS Edition you need to keep a single admin if security is important.
    I think having administrative roles is a great idea. I don't like the idea of every admin being able to see every users email. As the main admin *I* don't need to see their email. The other admins definitely do not. If we could assign a role for account creation, password reset, etc without being able to view everyone's email that would be very helpful.

    Take care,

    Lucas

  4. #4
    schemers is offline Zimbra Employee
    Join Date
    Aug 2005
    Posts
    228
    Rep Power
    9

    Default

    fine-grained access control is definitely the goal long term. We took a minor step towards that with per-domain admins, and once we get fullblown group support into the server we can then use them for "roles"...
    Bugzilla - Wiki - Downloads - Before posting... Search!

  5. #5
    simonellistonball is offline Intermediate Member
    Join Date
    Apr 2006
    Posts
    20
    Rep Power
    9

    Default

    Of course in the mean time, you could write a set of admin scripts, or a separate web app could be used for simple functions... eg. a wrapper for zmprov sp to reset passwords. Would be nice to have full role based controls though.

  6. #6
    pfefferc is offline Senior Member
    Join Date
    Jan 2007
    Posts
    58
    Rep Power
    8

    Default Disable Admin View Mail

    Can you disable it now? I have the Network Version 4.5.

  7. #7
    gmsmith is offline Moderator
    Join Date
    Apr 2006
    Location
    Williamsburg, VA
    Posts
    451
    Rep Power
    9

    Default

    Quote Originally Posted by pfefferc View Post
    Can you disable it now? I have the Network Version 4.5.
    Just remove the "Admnistrator" check box and assign them to "Domain Administrator" and they will not be able to see end user email.

  8. #8
    pfefferc is offline Senior Member
    Join Date
    Jan 2007
    Posts
    58
    Rep Power
    8

    Default Disable Admin View Mail

    But then they won't be able to change some of the admin features.

  9. #9
    gmsmith is offline Moderator
    Join Date
    Apr 2006
    Location
    Williamsburg, VA
    Posts
    451
    Rep Power
    9

    Default

    Quote Originally Posted by pfefferc View Post
    But then they won't be able to change some of the admin features.
    Perhaps...but they either get domain admin/full admin/ or no admin. If you would like to see the behavior modified, submit a request for enhancement in bugzilla.

  10. #10
    pfefferc is offline Senior Member
    Join Date
    Jan 2007
    Posts
    58
    Rep Power
    8

    Default Disable Admin View Mail

    This was suppose to be fixed in Version 4.5.

Page 1 of 6 123 ... LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Problems with port 25
    By yogiman in forum Installation
    Replies: 57
    Last Post: 06-13-2011, 01:55 PM
  2. Replies: 7
    Last Post: 02-03-2011, 07:01 AM
  3. fresh install down may be due to tomcat
    By gon in forum Installation
    Replies: 10
    Last Post: 07-25-2007, 08:09 AM
  4. DynDNS and Zimbra
    By afterwego in forum Installation
    Replies: 30
    Last Post: 04-01-2007, 03:34 PM
  5. receiveing mail
    By maybethistime in forum Administrators
    Replies: 15
    Last Post: 12-09-2005, 04:55 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •