Permissions for auditor

Issue #154 resolved
s s created an issue

Hello, i am using

piler 0.1.24-master-branch, build 836, Janos SUTO <sj@acts.hu>

Build Date: Sun Sep 1 21:35:24 CEST 2013
ldd version: ldd (Debian EGLIBC 2.13-38) 2.13
gcc version: gcc version 4.7.2 (Debian 4.7.2-5) 
Configure command: ./configure --localstatedir=/var --enable-starttls --enable-tcpwrappers --with-database=mysql

I've added two domains to piler: a.com and b.com

Also i created 2 separate auditors and assigned them in this way: AuditorA > a.com AuditorB > b.com

I supposed what they can see only their own domains and can not see other domains.

But then i login as AuditorA i can make search for both domains a.com & b.com. The same issue for AuditorB.

What I did wrong?

Thanks.

Comments (4)

  1. s s reporter

    It worked, cool.

    Can you please answer is there any way to delete custom email from archive? It would be great if user / auditor was able to delete email(s) from gui management.

    Thanks again.

  2. Janos SUTO repo owner

    Currently there's no way in the gui to delete any email. The main purpose of the archive is to provide a tamper proof repository of emails.

    However you are not out of options, you need some sql hacking: set the retained column for the given message to the past, then run pilerpurge as user piler.

  3. Log in to comment