GUI search results different than database contents

[Beth Morgan]

I've set up a few domains, and have assigned a user as one particular domain's auditor. She is able to view just 9 messages for her domain, but when I look in the database, I see 50+ messages with her domain name included. I profess no expertise at all! Here's what I have installed:

piler -V piler 1.1.0, build 884, Janos SUTO [e-mail]

Build Date: Tue Oct 28 21:11:33 EDT 2014 ldd version: ldd (Ubuntu EGLIBC 2.19-0ubuntu6.3) 2.19 gcc version: gcc version 4.8.2 (Ubuntu 4.8.2-19ubuntu1) Configure command: ./configure --localstatedir=/var --with-database=mysql --enable-starttls --enable-tcpwrappers

and, like I said, in the GUI, she only sees 9 messages. But when I issue the command, mysql> select * from v_messages where fromdomain="theirdomain.com"; the result is some 56 rows.

When I log in as auditor@local, I am able to see many more messages by searching in the advanced search.

I have the user configured as an auditor, with her company's domain listed in the Domain(s)**: section.

Does it sound like a config issue or end user ignorance?

Thanks! Beth

[Janos SUTO]

Please show me the sphinx query for this user. You may find it in the mail logs. Also show me config-site.php (no need to reveal any passwords) settings.

[Beth Morgan]

Thanks for the help. Here's the query from just clicking the search icon in the GUI:

Oct 30 13:48:01 sop5 piler-webui[8105]: sphinx query: 'SELECT id FROM main1,dailydelta1,delta1 WHERE MATCH(' (@todomain mo*ortXcom|moortXcom | @fromdomain moortXcom|mo***ortXcom ) ') ORDER BY sent DESC LIMIT 0,1000 OPTION max_matches=1000' in 0.00 s, 19 hits, 19 total found

Here is config-site.php:

<?php

$config['PILER_HOST'] = 'x.x.x.x'; $config['SITE_NAME'] = 'sop5.*.com'; $config['SITE_URL'] = 'http://sop5..com/'; $config['DIR_BASE'] = '/var/www/sop5.**.com/';

$config['ENABLE_SYSLOG'] = 1;

$config['SMTP_DOMAIN'] = 'sop5.*.com'; $config['SMTP_FROMADDR'] = 'no-reply@sop5..com'; $config['ADMIN_EMAIL'] = 'admin@sop5.**.com';

$config['DB_DRIVER'] = 'mysql'; $config['DB_PREFIX'] = ''; $config['DB_HOSTNAME'] = 'localhost'; $config['DB_USERNAME'] = 'piler'; $config['DB_PASSWORD'] = '**'; $config['DB_DATABASE'] = 'piler';

$config['SMARTHOST'] = 'mail.*.com'; $config['SMARTHOST_PORT'] = 25;

$config['RESTRICTED_AUDITOR'] = 1;

?>

Thanks for any insight!

[Beth Morgan]

Argh. Wherever you see an asterisk, it was my attempt to hide their identity. I apologize for the inconsistency. Also know that I don't really have x.x.x.x as an IP address. I now see I should have used the code markup. Thanks!

[Janos SUTO]

A question: why do you have RESTRICTED_AUDITOR set?

[Beth Morgan]

There are a few different domains on this machine. One shouldn't be able to see any archived mail from the other.

[Janos SUTO]

Hmm, it's odd indeed. However I noticed that firstly you had mentioned 9, then later 19. Anyway if a teamviewer session is possible, I'd like to check it on my own. If it's acceptable then you may find me on skype (janos.suto) to discuss the details.

[Beth Morgan]

Oh! Well, I copied the wrong log entry, so I had a different result. I'll look you up on Skype during the week. Thank you for your dedication!

[Janos SUTO]

No news is good news.