Hello,

we are running mail and other services for privacy-aware people.
Thus we would like to prevent our users from discovering all other user account names.

Currently the other accounts can be discovered in the "share calender" widget (same for "share mail folder" and others, I guess). Here the auto-completion suggests the list of matching account names after at least two characters are typed into the input field.

We tried to work around this in a few ways:

• A) change SearchFieldNames of the LDAP server to an empty list (())
  • sadly this prevents users from sharing resources, since even correct account names were not accepted anymore (somehow this is the expected behavior)
• B) increase SOGoSearchMinimumWordLength to a "safe" value (e.g. 12 characters)
  • the discovery of usernames is now quite hard - this is good
  • problem 1: it is not possible to enter usernames into fields, if the username is shorter than the configured minimum search length
  • problem 2: search for emails (and maybe other things) is now quite inconvenient (since you need to type in a lot of characters before the search starts)

Currently we are a bit stuck.

I could imagine, that the problem can be solved in a few ways:

A) change the search behavior slightly:

• continue to search for matching words ("is part of") after the minimum amount of characters is entered
• additionally look for perfect matches (equality) for any number of entered characters
  • this would allow users to enter the full name of a target account (this is impossible at the moment, if the minimum search limit is too high)

B) allow to disable auto-completion of account names

• all inputs are tested only for equality (not for partial matches)

C) allow to disable account name verification

• simply accept any account name entered into an account name field

Thank you for your time!