Page 1 of 6 123 ... LastLast
Results 1 to 10 of 52

Thread: Disable Admin View Mail

  1. #1
    Join Date
    Apr 2006
    Posts
    1
    Rep Power
    9

    Default Disable Admin View Mail

    I'm using Zimbra Open Source to manage multi-domain account, and I have added some user to the "admin" group so they can enter to the Admin Console (7071 port).

    My big problem is that this other administrator user CAN view all mail inbox and all the messages for that users. I need that only the other user administrator can add/modify/delete email account but not view client private messages.

    How can I disable the "View Mail" Option from the Admin Console (7071)?

    Thanks for your time.

  2. #2
    Join Date
    Aug 2005
    Location
    San Mateo, CA
    Posts
    4,789
    Rep Power
    19

    Default

    The OSS Edition doesn't allow per-domain admins. You can get this feature in the Network Edition. For the OSS Edition you need to keep a single admin if security is important.
    Looking for new beta users -> Co-Founder of Acompli. Previously worked at Zimbra (and Yahoo! & VMware) since 2005.

  3. #3
    Join Date
    Apr 2006
    Posts
    23
    Rep Power
    9

    Default

    Quote Originally Posted by KevinH
    The OSS Edition doesn't allow per-domain admins. You can get this feature in the Network Edition. For the OSS Edition you need to keep a single admin if security is important.
    I think having administrative roles is a great idea. I don't like the idea of every admin being able to see every users email. As the main admin *I* don't need to see their email. The other admins definitely do not. If we could assign a role for account creation, password reset, etc without being able to view everyone's email that would be very helpful.

    Take care,

    Lucas

  4. #4
    Join Date
    Aug 2005
    Posts
    228
    Rep Power
    10

    Default

    fine-grained access control is definitely the goal long term. We took a minor step towards that with per-domain admins, and once we get fullblown group support into the server we can then use them for "roles"...
    Bugzilla - Wiki - Downloads - Before posting... Search!

  5. #5
    Join Date
    Apr 2006
    Posts
    20
    Rep Power
    9

    Default

    Of course in the mean time, you could write a set of admin scripts, or a separate web app could be used for simple functions... eg. a wrapper for zmprov sp to reset passwords. Would be nice to have full role based controls though.

  6. #6
    Join Date
    Jan 2007
    Posts
    58
    Rep Power
    8

    Default Disable Admin View Mail

    Can you disable it now? I have the Network Version 4.5.

  7. #7
    Join Date
    Apr 2006
    Location
    Williamsburg, VA
    Posts
    451
    Rep Power
    9

    Default

    Quote Originally Posted by pfefferc View Post
    Can you disable it now? I have the Network Version 4.5.
    Just remove the "Admnistrator" check box and assign them to "Domain Administrator" and they will not be able to see end user email.

  8. #8
    Join Date
    Jan 2007
    Posts
    58
    Rep Power
    8

    Default Disable Admin View Mail

    But then they won't be able to change some of the admin features.

  9. #9
    Join Date
    Apr 2006
    Location
    Williamsburg, VA
    Posts
    451
    Rep Power
    9

    Default

    Quote Originally Posted by pfefferc View Post
    But then they won't be able to change some of the admin features.
    Perhaps...but they either get domain admin/full admin/ or no admin. If you would like to see the behavior modified, submit a request for enhancement in bugzilla.

  10. #10
    Join Date
    Jan 2007
    Posts
    58
    Rep Power
    8

    Default Disable Admin View Mail

    This was suppose to be fixed in Version 4.5.

Similar Threads

  1. Problems with port 25
    By yogiman in forum Installation
    Replies: 57
    Last Post: 06-13-2011, 02:55 PM
  2. Replies: 7
    Last Post: 02-03-2011, 07:01 AM
  3. fresh install down may be due to tomcat
    By gon in forum Installation
    Replies: 10
    Last Post: 07-25-2007, 09:09 AM
  4. DynDNS and Zimbra
    By afterwego in forum Installation
    Replies: 30
    Last Post: 04-01-2007, 04:34 PM
  5. receiveing mail
    By maybethistime in forum Administrators
    Replies: 15
    Last Post: 12-09-2005, 04:55 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •