Domain administrator create distribution list rights

[dave_kempe]

Hi,
we are trying to setup domain administrators with the ability to create distribution lists for the domains they have control over. We have got it all nearly working (over soap even) except the creation of distribution lists seems to be either buggy or we have missed a grant somewhere.

This is the output from the relevant account:

$ zmsoap -z GetGrantsRequest/grantee=demoadmin@zimbrademo.sol1.net @type=usr @by=name @all=1
<GetGrantsResponse xmlns="urn:zimbraAdmin">
<grant>
<target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">createDistributionList</right>
</grant>
<grant>
<target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">adminConsoleDLRights</right>
</grant>
<grant>
<target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">addAccountAlias</right>
</grant>
<grant>
<target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">createAccount</right>
</grant>
<grant>
<target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">domainAdminConsoleRights</right>
</grant>
<grant>
<target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">domainAdminDistributionListRights</right>
</grant>
<grant>
<target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">domainAdminAccountRights</right>
</grant>
<grant>
<target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">adminLoginAs</right>
</grant>
<grant>
<target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">domainAdminConsoleRights</right>
</grant>
<grant>
<target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">createDistributionList</right>
</grant>
<grant>
<target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">domainAdminDistributionListRights</right>
</grant>
<grant>
<target id="" name="globalacltarget" type="global"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">domainAdminZimletRights</right>
</grant>
<grant>
<target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">domainAdminRights</right>
</grant>
<grant>
<target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">createAccount</right>
</grant>
<grant>
<target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">domainAdminAccountRights</right>
</grant>
<grant>
<target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">createAlias</right>
</grant>
<grant>
<target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">addAccountAlias</right>
</grant>
<grant>
<target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">adminConsoleDLRights</right>
</grant>
<grant>
<target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">createAlias</right>
</grant>
<grant>
<target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">addDistributionListAlias</right>
</grant>
<grant>
<target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">adminLoginAs</right>
</grant>
<grant>
<target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">domainAdminRights</right>
</grant>
<grant>
<target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">domainAdminDomainRights</right>
</grant>
<grant>
<target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">addDistributionListAlias</right>
</grant>
<grant>
<target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
<grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
<right canDelegate="0" deny="0" subDomain="0">domainAdminDomainRights</right>
</grant>


I realise some of these are duplicates, or overlap, but only after some desperation on our part to get it working...
The crux of the problem is that the domain admin can see the distribution list pane, but cannot add the 'List Name' which is crucial to the creation of a distribution list. The List Name and '@' UI is completely missing in the view given by the above grant.
Any hints or tips appreciated, frankly the documentation as to these rights is pretty slim (or I have not found a good explanation as to how some of these work).

[dave_kempe]

Anyone got any tips on this? If someone is willing to give this a go, they get a free copy of our ruby script that makes domain admins for a given domain (of which this is the last part).

[jkubik]

Hi Dave,

Did you ever figure this out? I have a user with admin rights who cannot see that critical "List Name" line. He seems to be able to do everything else just fine. Just that one line is missing from the Distribution List screen. We are running Zimbra Server Network edition 6.0.8 so hopefully your solutions was for a version close enough to this one that it will help me too.

Thanks!

Julie