efa-project.org

Hello

If I'm not mistaken, a user with Domain Administrator rights has access to all mails for that specific domain (or more if defined in filters for the user). Only an administrator can view all mails which are flowing through E.F.A.
I observed, that a domain administrator can navigate to the user management page and edit, delete or create users. I tested it and added additional domains in the user filter and then I had access to the mails of other domains, which in my opinion is a big problem for data privacy.

Can someone confirm my observations?

Thanks in advance.

Yeah, this issue was very recently identified. Stay tuned for a 3.0.2.0 update to resolve this an other issues (I am back from Chicago, IL now, so I can focus on eFa now )

Hi Shawn

Thank you very much for the information and your valuable effort.

Should be resolved in 3.0.2.0.