Domain Administrator has write access to user list

Report bugs and workarounds
Post Reply
xenos1983
Posts: 6
Joined: 14 Feb 2017 08:30

Domain Administrator has write access to user list

Post by xenos1983 »

Hello

If I'm not mistaken, a user with Domain Administrator rights has access to all mails for that specific domain (or more if defined in filters for the user). Only an administrator can view all mails which are flowing through E.F.A.
I observed, that a domain administrator can navigate to the user management page and edit, delete or create users. I tested it and added additional domains in the user filter and then I had access to the mails of other domains, which in my opinion is a big problem for data privacy.

Can someone confirm my observations?

Thanks in advance.
User avatar
shawniverson
Posts: 3783
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: Domain Administrator has write access to user list

Post by shawniverson »

Yeah, this issue was very recently identified. Stay tuned for a 3.0.2.0 update to resolve this an other issues (I am back from Chicago, IL now, so I can focus on eFa now :dance: )
xenos1983
Posts: 6
Joined: 14 Feb 2017 08:30

Re: Domain Administrator has write access to user list

Post by xenos1983 »

Hi Shawn

Thank you very much for the information and your valuable effort.
User avatar
shawniverson
Posts: 3783
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: Domain Administrator has write access to user list

Post by shawniverson »

Should be resolved in 3.0.2.0.
Post Reply