Results 1 to 3 of 3

Thread: Domain administrator create distribution list rights

  1. #1
    Join Date
    Sep 2005
    Location
    Sydney, Australia
    Posts
    291
    Rep Power
    10

    Default Domain administrator create distribution list rights

    Hi,
    we are trying to setup domain administrators with the ability to create distribution lists for the domains they have control over. We have got it all nearly working (over soap even) except the creation of distribution lists seems to be either buggy or we have missed a grant somewhere.

    This is the output from the relevant account:

    $ zmsoap -z GetGrantsRequest/grantee=demoadmin@zimbrademo.sol1.net @type=usr @by=name @all=1
    <GetGrantsResponse xmlns="urn:zimbraAdmin">
    <grant>
    <target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">createDistributionList</right>
    </grant>
    <grant>
    <target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">adminConsoleDLRights</right>
    </grant>
    <grant>
    <target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">addAccountAlias</right>
    </grant>
    <grant>
    <target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">createAccount</right>
    </grant>
    <grant>
    <target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">domainAdminConsoleRights</right>
    </grant>
    <grant>
    <target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">domainAdminDistributionListRights</right>
    </grant>
    <grant>
    <target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">domainAdminAccountRights</right>
    </grant>
    <grant>
    <target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">adminLoginAs</right>
    </grant>
    <grant>
    <target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">domainAdminConsoleRights</right>
    </grant>
    <grant>
    <target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">createDistributionList</right>
    </grant>
    <grant>
    <target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">domainAdminDistributionListRights</right>
    </grant>
    <grant>
    <target id="" name="globalacltarget" type="global"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">domainAdminZimletRights</right>
    </grant>
    <grant>
    <target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">domainAdminRights</right>
    </grant>
    <grant>
    <target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">createAccount</right>
    </grant>
    <grant>
    <target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">domainAdminAccountRights</right>
    </grant>
    <grant>
    <target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">createAlias</right>
    </grant>
    <grant>
    <target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">addAccountAlias</right>
    </grant>
    <grant>
    <target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">adminConsoleDLRights</right>
    </grant>
    <grant>
    <target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">createAlias</right>
    </grant>
    <grant>
    <target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">addDistributionListAlias</right>
    </grant>
    <grant>
    <target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">adminLoginAs</right>
    </grant>
    <grant>
    <target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">domainAdminRights</right>
    </grant>
    <grant>
    <target id="48bce958-0956-4fc2-8f0d-67de64e9eece" name="zimbrademo.sol1.net" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">domainAdminDomainRights</right>
    </grant>
    <grant>
    <target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">addDistributionListAlias</right>
    </grant>
    <grant>
    <target id="be26fc10-478b-4989-88b3-3dff437cc163" name="abcwidgets.com" type="domain"/>
    <grantee id="b9c681d5-1005-41ae-9a75-f2734a9df27e" name="demoadmin@zimbrademo.sol1.net" type="usr"/>
    <right canDelegate="0" deny="0" subDomain="0">domainAdminDomainRights</right>
    </grant>


    I realise some of these are duplicates, or overlap, but only after some desperation on our part to get it working...
    The crux of the problem is that the domain admin can see the distribution list pane, but cannot add the 'List Name' which is crucial to the creation of a distribution list. The List Name and '@' UI is completely missing in the view given by the above grant.
    Any hints or tips appreciated, frankly the documentation as to these rights is pretty slim (or I have not found a good explanation as to how some of these work).
    http://www.solutionsfirst.com.au/hosting/zimbra/
    Australia's premier Zimbra Hosting Partner
    Resellers wanted!

  2. #2
    Join Date
    Sep 2005
    Location
    Sydney, Australia
    Posts
    291
    Rep Power
    10

    Default

    Anyone got any tips on this? If someone is willing to give this a go, they get a free copy of our ruby script that makes domain admins for a given domain (of which this is the last part).
    http://www.solutionsfirst.com.au/hosting/zimbra/
    Australia's premier Zimbra Hosting Partner
    Resellers wanted!

  3. #3
    Join Date
    Oct 2007
    Posts
    6
    Rep Power
    8

    Question

    Hi Dave,

    Did you ever figure this out? I have a user with admin rights who cannot see that critical "List Name" line. He seems to be able to do everything else just fine. Just that one line is missing from the Distribution List screen. We are running Zimbra Server Network edition 6.0.8 so hopefully your solutions was for a version close enough to this one that it will help me too.

    Thanks!

    Julie

Similar Threads

  1. [SOLVED] Listing Distribution List Members
    By rwjblue in forum Administrators
    Replies: 8
    Last Post: 05-06-2014, 10:20 PM
  2. Replies: 20
    Last Post: 03-18-2008, 06:37 AM
  3. Replies: 4
    Last Post: 01-29-2008, 08:43 PM
  4. Distribution list to all users at domain
    By cirrus_blue in forum Users
    Replies: 9
    Last Post: 05-16-2007, 10:44 AM
  5. Orphaned alias for a distribution list
    By area in forum Administrators
    Replies: 0
    Last Post: 09-17-2006, 09:22 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •