We installed the new SOGo extension in a Plesk server.

We have a big security concern. All users can see all users of all domains! So when we want to share a calendar for example, we can see all users of all domains by doing a simple search.

Is this a bug? Or a configuration problem?

Here are the details of our sogo.conf file

SOGoLanguage = English;
SOGoTimeZone = UTC;
SOGoFirstDayOfWeek = 0;
SOGoMailMessageCheck = manually;
SOGoMailAuxiliaryUserAccountsEnabled = YES;
SOGoMemcachedHost = "127.0.0.1";
SOGoRefreshViewCheck = every_5_minutes;

WOWorkersCount = 10;
SOGoMaximumMessageSizeLimit = 20480;
SxVMemLimit = 3840;

SOGoAppointmentSendEMailNotifications = NO;
SOGoPasswordChangeEnabled = NO;

SOGoProfileURL = "mysql://sogo_63b5xxxxxxxxxxc380bad/sogo_user_profile";
OCSFolderInfoURL = "mysql://sogo_63b527c38xxxxxxxxxad/sogo_folder_info";
OCSSessionsFolderURL = "mysql://sogo_63b52xxxxxxxxxxxxad/sogo_sessions_folder";
OCSEMailAlarmsFolderURL = "mysql://sogo_63b5xxxxxxxxxxxxx27c380bad/sogo_alarms_folder";
OCSStoreURL = "mysql://sogo_6xxxxxxxxc380bad/sogo_store";
OCSAclURL = "mysql://sogo_63b527xxxxxxxxxxxxx80bad/sogo_acl";
OCSCacheFolderURL = "mysql://sogo_63bxxxxxxxxxx380bad/sogo_cache_folder";

SOGoUserSources =
(
    {
        type = sql;
        id = plesk;
        viewURL = "mysql://sogo_xxxxxxxxxxxxxxxxxxxxad/sogo_users_view";
        canAuthenticate = YES;
        isAddressBook = NO;
        userPasswordAlgorithm = sym-aes-128-cbc;
        keyPath = "/etc/sogo/private/secret_key";
    }
);

SOGoMailingMechanism = smtp;
SOGoSMTPServer = "smtp://localhost:25/?tls=YES&tlsVerifyMode=allowInsecureLocalhost";
SOGoSMTPAuthenticationType = PLAIN;

SOGoSentFolderName = "INBOX/Sent";
SOGoTrashFolderName = "INBOX/Trash";
SOGoDraftsFolderName = "INBOX/Drafts";
SOGoJunkFolderName = "INBOX/Junk";
SOGoIMAPServer = "imaps://localhost:143/?tls=YES&tlsVerifyMode=allowInsecureLocalhost";
SOGoSieveServer = "sieve://localhost:4190/?tls=YES&tlsVerifyMode=allowInsecureLocalhost";
SOGoIMAPAclConformsToIMAPExt = NO;
SOGoVacationEnabled = YES;
SOGoForwardEnabled = YES;
SOGoSieveScriptsEnabled = YES;

}