View Issue Details

IDProjectCategoryView StatusLast Update
0005514SOGoGUIpublic2022-05-09 13:06
Reportersumpfralle Assigned To 
PrioritynormalSeverityfeatureReproducibilityalways
Status newResolutionopen 
OSDebianOS VersionBullseye 
Summary0005514: Hide user accounts from each other
Description

Hello,

we are running mail and other services for privacy-aware people.
Thus we would like to prevent our users from discovering all other user account names.

Currently the other accounts can be discovered in the "share calender" widget (same for "share mail folder" and others, I guess). Here the auto-completion suggests the list of matching account names after at least two characters are typed into the input field.

We tried to work around this in a few ways:

  • A) change SearchFieldNames of the LDAP server to an empty list (())
    • sadly this prevents users from sharing resources, since even correct account names were not accepted anymore (somehow this is the expected behavior)
  • B) increase SOGoSearchMinimumWordLength to a "safe" value (e.g. 12 characters)
    • the discovery of usernames is now quite hard - this is good
    • problem 1: it is not possible to enter usernames into fields, if the username is shorter than the configured minimum search length
    • problem 2: search for emails (and maybe other things) is now quite inconvenient (since you need to type in a lot of characters before the search starts)

Currently we are a bit stuck.

I could imagine, that the problem can be solved in a few ways:

A) change the search behavior slightly:

  • continue to search for matching words ("is part of") after the minimum amount of characters is entered
  • additionally look for perfect matches (equality) for any number of entered characters
    • this would allow users to enter the full name of a target account (this is impossible at the moment, if the minimum search limit is too high)

B) allow to disable auto-completion of account names

  • all inputs are tested only for equality (not for partial matches)

C) allow to disable account name verification

  • simply accept any account name entered into an account name field

Thank you for your time!

Tagsldap, privacy, search

Relationships

related to 0004811 assignedfrancis disable usersearch completion with web calendar 

Activities

sumpfralle

sumpfralle

2022-05-06 12:29

reporter   ~0016035

The goal of this request is similar to 0004811 (disable usersearch completion).

Issue History

Date Modified Username Field Change
2022-05-05 21:59 sumpfralle New Issue
2022-05-05 21:59 sumpfralle Tag Attached: ldap
2022-05-05 21:59 sumpfralle Tag Attached: privacy
2022-05-05 21:59 sumpfralle Tag Attached: search
2022-05-06 12:29 sumpfralle Note Added: 0016035
2022-05-09 13:06 Christian Mack Relationship added related to 0004811