View Issue Details

IDProjectCategoryView StatusLast Update
0004928SOGoBackend Generalpublic2020-01-08 17:51
Reporterparavis Assigned To 
PriorityhighSeveritymajorReproducibilityalways
Status newResolutionopen 
Platform[Server] LinuxOSRHEL/CentOSOS Version7
Product Version4.0.7 
Summary0004928: Domains can search for all users in all domains in multi-domain configuration with SQL backend
Description

Since we compile our SOGo with a few modifications, we don't update too frequently which is why we are running on version 4.0.7. However, this issue also does exist in the latest version of SOGo 2.

We have a multi-domain configuration, which all share the same SQL view for identifying the user and matching them up to the proper domain when authenticating.

The issue that we are having, however, is that once a user logs in with their defined domain settings, they are able to search through all of the other domains users as well when searching for a user to delegate or share a folder. This issue does not occur when using LDAP backend.

Steps To Reproduce

Have a multi-domain setup with SQL (not AD) where all domains share the same view but with authenticationFilter matching the user's login domain. Log in and click on a mail folder then "Sharing".

When searching for addresses, it will pull from the entire list of all SOGo users from all domains, and not the users from that user's respective domain.

Tagsall, delegation, sharing

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2020-01-08 17:51 paravis New Issue
2020-01-08 17:51 paravis Tag Attached: all
2020-01-08 17:51 paravis Tag Attached: delegation
2020-01-08 17:51 paravis Tag Attached: sharing