View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0004928 | SOGo | Backend General | public | 2020-01-08 17:51 | 2020-01-08 17:51 |
| Reporter | paravis | Assigned To | |||
| Priority | high | Severity | major | Reproducibility | always |
| Status | new | Resolution | open | ||
| Platform | [Server] Linux | OS | RHEL/CentOS | OS Version | 7 |
| Product Version | 4.0.7 | ||||
| Summary | 0004928: Domains can search for all users in all domains in multi-domain configuration with SQL backend | ||||
| Description | Since we compile our SOGo with a few modifications, we don't update too frequently which is why we are running on version 4.0.7. However, this issue also does exist in the latest version of SOGo 2. We have a multi-domain configuration, which all share the same SQL view for identifying the user and matching them up to the proper domain when authenticating. The issue that we are having, however, is that once a user logs in with their defined domain settings, they are able to search through all of the other domains users as well when searching for a user to delegate or share a folder. This issue does not occur when using LDAP backend. | ||||
| Steps To Reproduce | Have a multi-domain setup with SQL (not AD) where all domains share the same view but with authenticationFilter matching the user's login domain. Log in and click on a mail folder then "Sharing". When searching for addresses, it will pull from the entire list of all SOGo users from all domains, and not the users from that user's respective domain. | ||||
| Tags | all, delegation, sharing | ||||
