Admin View Mail tool

[langs]

Is there a way to remove the option of "View Mail" from certain accounts in the admin ui?

We have a admin manager who is now paranoid some of my IT staff maybe viewing her email. This is due to when they updated her outlook connector a couple of times over the break as we were upgrading to 5.0.0 some of her mail got marked as read.

I have told the CEO they should either trust IT staff or fire them, however being the peace making person I am I thought I'd ask the question.

So is it possible from the CLI etc to modify certainly manager accounts so that this view mail option is not visible.

[phoenix]

This has been asked a few times, no it's not possible to disable that feature. There might be an RFE for it in bugzilla if you'd care to check.

[langs]

Yeah I had a bit of a look for a RFE before posting but couldn't see anything.

[phoenix]

Here you go: Bug 11515 - role based delegate administration I thought it was there somewhere. Do the usual, vote and raise a support case.

[narozk]

Well, my boss wouldn't accept a tool which I can use to view his mailbox... I think this "feature" makes zimbra unusable for many companies in Germany. I was shocked when I recognized that button really works!

[fcash]

Name a mail system where mail is stored on the server, where the admin users can't read the mail.

[phoenix]

Originally Posted by narozk

Well, my boss wouldn't accept a tool which I can use to view his mailbox... I think this "feature" makes zimbra unusable for many companies in Germany. I was shocked when I recognized that button really works!

You should check the bug that I posted above and vote on it if you want to see it implemented.

[raj]

Please dont tell her you can still read her mail without the "view mail" button...lol

[langs]

we all know its a cosmetic thing and may stop some operator types accessing it, but any real SysAdmin will still have access.

[narozk]

Sure, "real SysAdmins". But responsible admins are often just ordinary employees who were instructed by external admins like me. And most of employees even don't know what ssh is. When the instruction is finished that employee sets a new admin password and I am no longer responsible. Even if that employee becomes a haXx0r over night and checks the boss's mailbox without the magic button it would be an internal problem of the company because the employee hacked the system. That's diffrent from klicking a button...