{"action":"closed","issue":{"url":"https://api.github.com/repos/cyrusimap/cyrus-imapd/issues/2398","repository_url":"https://api.github.com/repos/cyrusimap/cyrus-imapd","labels_url":"https://api.github.com/repos/cyrusimap/cyrus-imapd/issues/2398/labels{/name}","comments_url":"https://api.github.com/repos/cyrusimap/cyrus-imapd/issues/2398/comments","events_url":"https://api.github.com/repos/cyrusimap/cyrus-imapd/issues/2398/events","html_url":"https://github.com/cyrusimap/cyrus-imapd/issues/2398","id":333502984,"node_id":"MDU6SXNzdWUzMzM1MDI5ODQ=","number":2398,"title":"\"group:\" acl identifiers do not work when reverseacls is enabled","user":{"login":"elliefm","id":10985135,"node_id":"MDQ6VXNlcjEwOTg1MTM1","avatar_url":"https://avatars3.githubusercontent.com/u/10985135?v=4","gravatar_id":"","url":"https://api.github.com/users/elliefm","html_url":"https://github.com/elliefm","followers_url":"https://api.github.com/users/elliefm/followers","following_url":"https://api.github.com/users/elliefm/following{/other_user}","gists_url":"https://api.github.com/users/elliefm/gists{/gist_id}","starred_url":"https://api.github.com/users/elliefm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/elliefm/subscriptions","organizations_url":"https://api.github.com/users/elliefm/orgs","repos_url":"https://api.github.com/users/elliefm/repos","events_url":"https://api.github.com/users/elliefm/events{/privacy}","received_events_url":"https://api.github.com/users/elliefm/received_events","type":"User","site_admin":false},"labels":[{"id":524721256,"node_id":"MDU6TGFiZWw1MjQ3MjEyNTY=","url":"https://api.github.com/repos/cyrusimap/cyrus-imapd/labels/3.1","name":"3.1","color":"c2e0c6","default":false}],"state":"closed","locked":false,"assignee":{"login":"elliefm","id":10985135,"node_id":"MDQ6VXNlcjEwOTg1MTM1","avatar_url":"https://avatars3.githubusercontent.com/u/10985135?v=4","gravatar_id":"","url":"https://api.github.com/users/elliefm","html_url":"https://github.com/elliefm","followers_url":"https://api.github.com/users/elliefm/followers","following_url":"https://api.github.com/users/elliefm/following{/other_user}","gists_url":"https://api.github.com/users/elliefm/gists{/gist_id}","starred_url":"https://api.github.com/users/elliefm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/elliefm/subscriptions","organizations_url":"https://api.github.com/users/elliefm/orgs","repos_url":"https://api.github.com/users/elliefm/repos","events_url":"https://api.github.com/users/elliefm/events{/privacy}","received_events_url":"https://api.github.com/users/elliefm/received_events","type":"User","site_admin":false},"assignees":[{"login":"elliefm","id":10985135,"node_id":"MDQ6VXNlcjEwOTg1MTM1","avatar_url":"https://avatars3.githubusercontent.com/u/10985135?v=4","gravatar_id":"","url":"https://api.github.com/users/elliefm","html_url":"https://github.com/elliefm","followers_url":"https://api.github.com/users/elliefm/followers","following_url":"https://api.github.com/users/elliefm/following{/other_user}","gists_url":"https://api.github.com/users/elliefm/gists{/gist_id}","starred_url":"https://api.github.com/users/elliefm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/elliefm/subscriptions","organizations_url":"https://api.github.com/users/elliefm/orgs","repos_url":"https://api.github.com/users/elliefm/repos","events_url":"https://api.github.com/users/elliefm/events{/privacy}","received_events_url":"https://api.github.com/users/elliefm/received_events","type":"User","site_admin":false}],"milestone":null,"comments":7,"created_at":"2018-06-19T03:03:00Z","updated_at":"2018-07-24T02:33:18Z","closed_at":"2018-07-24T02:33:18Z","author_association":"CONTRIBUTOR","body":"The reverse ACL's optimisation avoids the expensive whole-db sweep during LIST operations by looking up the reverse ACL records, and only examining mailboxes that the user has access to.\r\n\r\nGroup ID's are currently not stored as reverse ACL's, so any mailboxes that a user has access to via a group membership are totally ignored.\r\n\r\nIn the meantime, the workaround is that if you use groups for managing access controls, you cannot also use the reverseacls optimisation.\r\n\r\nThe solution will be to extend the reverseacl's optimisation to handle groups.\r\n\r\nTagging this as 3.0 and 3.1 because it affects both, but the fix might not make it back to 3.0 -- depends on how intrusive it is."}}
{"actor":{"display_login":"elliefm"}}