Different Privileges on Public Contacts [message #122931] |
Fri, 17 July 2015 14:09  |
j.a.duke
Messages: 239 Registered: October 2006
|
|
|
|
I'd like to set the public Contacts folder privileges to be read-only for everyone except the administrator.
I'm running KC 8.5.1 and seem to be unable to do this through the web GUI.
Regardless of what I set, it reverts back when I try to confirm that the change worked.
In fact, there are users/groups listed for privileges to the public folder hierarchy that I can't delete or if I do, appear to delete the wrong user/group.
Is there a place within the config file(s) where this is all defined and I can clean it up there if the GUI isn't the appropriate tool?
Thanks.
Cheers,
Jon
|
|
|
|
Re: Different Privileges on Public Contacts [message #123422 is a reply to message #122934] |
Tue, 11 August 2015 15:14   |
j.a.duke
Messages: 239 Registered: October 2006
|
|
|
|
ksnyder (KERIO) wrote on Fri, 17 July 2015 12:11Hi Jon,
Do you have something configured in User Templates-->[template]-->Rights that is granting public folder admin rights to the default template that you're assigning to all users?
Regards,
Ken
Ken,
I missed your reply, then went on vacation....
I'm not using templates at on all this server.
In fact, in the privileges for contacts, there are duplicates of the admin account and the "All users" entry. Trying to remove one of the duplicates does bad things, like locking out the admin account. Fortunately, my personal account has admin privs, so I can fix things from there, but would rather not have to do that.
Also, I want the mail folders in Public Folders to be writeable by all, but not the contacts. Any suggestions?
Thanks.
Cheers,
Jon
|
|
|
|
Re: Different Privileges on Public Contacts [message #123528 is a reply to message #123445] |
Thu, 13 August 2015 17:41   |
j.a.duke
Messages: 239 Registered: October 2006
|
|
|
|
ksnyder (KERIO) wrote on Tue, 11 August 2015 13:44A public folder is a public folder. Whether it contains email or contacts. Unfortunately, I believe it's all or nothing...users can either write to public folders (of all types) or they cannot.
Ken,
The issue that I'm trying to resolve is people accidentally inserting their personal contacts into the public contacts folder and I want to be able to modify the same folder from my account (as a non-admin account granted appropriate privileges) to update the contact information stored there. Additionally, I want the rest of the accounts to be able to use the various public folders for email storage.
On most servers (generically), one can set permissions for child folders different from the parent. That should be an option here, but it appears not to be. I guess I'm also wondering why there's even an option of Access Rights for the subfolders when setting them differently from the parent Public Folder does nothing.
Thanks.
Cheers,
Jon
|
|
|
|
Re: Different Privileges on Public Contacts [message #123533 is a reply to message #123532] |
Thu, 13 August 2015 19:40   |
j.a.duke
Messages: 239 Registered: October 2006
|
|
|
|
Brian Carmichael (Kerio) wrote on Thu, 13 August 2015 12:11Jon, in the properties of your users go to the rights tab. Make sure it's not enabled to manage public folders.
I just checked several accounts and my account is the only one with Public Folder admin prigs.
I've attached a PDF showing the settings for Account Rights and also Access Rights for Public Folders and Public Folders/Contacts.
Any suggestions on where I need to go from here?
I've been particularly bothered by the admin account and the all group showing up twice in the contacts rights.
Thanks.
Cheers,
Jon
[Updated on: Thu, 13 August 2015 19:47] Report message to a moderator
|
|
|
Re: Different Privileges on Public Contacts [message #123535 is a reply to message #123533] |
Thu, 13 August 2015 20:35  |
Kerio/GFI Brian
Messages: 852 Registered: March 2004 Location: California
|
|
|
|
Are you saying that users with read only access to the Contacts folder have write access to that folder? Based on your screenshot, only the mailadmin and jad should be able to edit the Contracts folder.
I notice that you are using the old webmail interface. If you log in using Kerio Connect Client, do the options or permissions seem any different?
Brian Carmichael
Instructional Content Architect
|
|
|