Public Folders & Permissions

[Sard]

I am trying to create a set of public folders, the content of which I only want to be visible by one or two people. I first promoted myself to administrator within Sac and then used Outlook to create a Public sub folder called “Test”. Still using outlook I set user permissions for this folder so that only myself and one other should theoretically be able to see it and view the content

Unfortunately the folder and it's content can be seen by all users despite the fact the Outlook set permissions should prevent unauthorised access. Before using Scalix I used a similar set-up using Exchange so I'm pretty sure that at least on the Outlook side I am setting things correctly.

I am probably missing something here and look forward to a little help.

Thanks

Neil

[dannyt]

Hi,

Public folder permissions in Scalix are additive so it is possible that you have left the default settings for the "Default" group unchanged which would allow everyone access to. Try to make sure that the "Administrator", "Local" and "Default" groups are set to the absolute minimum, then add explicit ACL entry for each user you want to give access to. Note that the creator of the folder (i.e. you in this case) would probably have full access regardless.

Regards,
Danny

[Sard]

Thanks for your response to this.

I hadn't had a chance to look at this again until last weekend but having done so I was very surprised to find my Public Folders now behaving correctly i.e. No one could view them without the correct permissions.

As far as I am aware there have been no other changes to Scalix, Suse or Outlook since I reported this problem. The only thing I can think of is that something within Scalix has changed / initialised following one of the daily backups during which I shut down Scalix, backup and re-start. I did try restarting Scalix at the time but without success so I am slightly puzzled.

Obviously not knowing why the Public Folders would not respond immediately to a permission setting is a slight concern and not knowing what triggered them to work correctly is also mildly worrying. Whilst the data in the folders is not top secret, I would still prefer the majority of users not to see it without invitation. I have therefore encrypted the data for additional security just in case future permission changes act erratically or worse the ones I have already set suddenly change back to their former state allowing global viewing.

Thanks

Neil