topic Re: Alfresco 3.3g IMAP configuration in Alfresco Archive

Alfresco 3.3g IMAP configuration

mariam — Fri, 26 Nov 2010 10:24:34 GMT

HelloI am relatively new to alfresco and I am trying to integrate thunderbird (or any other email client for that matter) with alfresco. At this point I managed to configure 2 imap mount points for the existing 2 accounts on my server, admin and maria. but i don't know (and didn't find ) how to gran

Re: Alfresco 3.3g IMAP configuration

mrogers — Fri, 26 Nov 2010 11:14:49 GMT

The permissions problem is ALF-4200 which is fixed in 3.4 Enterprise and 3.3.5 Enterprise.

Re: Alfresco 3.3g IMAP configuration

mariam — Fri, 26 Nov 2010 11:36:09 GMT

thanks.

I'm using comunity edition so will probably have to do the fix myself.

Re: Alfresco 3.3g IMAP configuration

mariam — Fri, 26 Nov 2010 13:27:54 GMT

do you by any chance know why all senders' email addresses appear with @demo.alfresco.org and receivers' email all have addresses with @alfresco.org although my domain is set to mydomain.com?

maybe there's a setting i missed.

thanks
Maria

Re: Alfresco 3.3g IMAP configuration

mrogers — Fri, 26 Nov 2010 13:55:56 GMT

I don't think there's such a property as:
email.server.host = 0.0.0.0

Confusingly this is the value that you use to set the inbound SMTP hostname.
email.server.domain=mydomain.com

I found and wiki'd this yesterday. It seems to have been that way for some time although I'm considering raising a JIRA to change it.

I've not yet turned my attention to the outbound SMTP settings.

Re: Alfresco 3.3g IMAP configuration

mariam — Mon, 29 Nov 2010 14:11:14 GMT

On the permissions problem: an user can only email another user if he has access to this other user's space (meaning he has been invited to the receivers INBOX space in the imap home folder). This is really incovenient since i don't want all the users to have access to all inboxes but only to their own. Would you mind disclosing the fix for this particular problem? You suggested in JIRA to do a permissions check in listMailboxes in ImapServiceImpl.java where its loading the mount points but since i am new to this i don't know exactly how to do this.

After a little digging I found out how to change the defaulFromAddress but this isn't exactly what I want. What I want is for thunderbird to display the right sender's address and not a default one. In Alfresco, when you browse the imap home user's INBOX you can see the right address for each email but in thunderbird it shows the default one. There must be a variable in the ImapServiceImpl that holds the senders' email.

I appreciate any help you can give me,
Maria

Re: Alfresco 3.3g IMAP configuration

mrogers — Mon, 29 Nov 2010 14:41:02 GMT

I've raised an issue to consider the permissions problem ALF-5950. There's a bit of a conflict between Alfresco being "a repository" and Alfresco being "an email server".

Are you trying to use alfresco like an email system? I'd appreciate if you could spell out what you are trying to do with inbound email since it may steer a potential change.

Re: Alfresco 3.3g IMAP configuration

mariam — Mon, 29 Nov 2010 15:05:13 GMT

I am trying to integrate alfresco with an email client but i don't intend to use it exclusively as an email server.

I haven't decided to buy the enterprise edition because I want to see if the application suits my needs (as a repository) that's why i'm struggling with the community edition. The server part was supposed to be a breeze but now i'm stuck.

Let me know when you have a solution for the permissions problem.

Maria

Re: Alfresco 3.3g IMAP configuration

mrogers — Mon, 29 Nov 2010 15:41:58 GMT

There's no "permissions problem". You can't write to a node that you don't have permissions to write to.

However I can see that there may be a use-case, especially after adding IMAP to alfresco where more "email server" like functionality may be useful where you could write to a space that you can't read.

Re: Alfresco 3.3g IMAP configuration

mariam — Mon, 29 Nov 2010 16:24:31 GMT

Yes this is the "permissions problem" I was referring to. Any ideas on how to grant write access to a users' INBOX but not a read one? I wouldn't mind making the changes myself in the code but I would be needing some guidance

Thank you for your help/suggestions/replies

Maria

Re: Alfresco 3.3g IMAP configuration

mariam — Tue, 30 Nov 2010 14:25:49 GMT

So after more reading and googling I discovered that you can create your own custom permissions group so tried it as follows:

modified permissionDefinitions.xml and added following lines:

<permissionSet type="cm:cmobject" expose="selected">
        …..


      <!– custom permission group–>

        <permissionGroup name="Emailer" expose="true" allowFullControl="false" >

          <includePermissionGroup type="sys:base" permissionGroup="Write"/>
     <!–<includePermissionGroup type="sys:base" permissionGroup="ReadPermissions"/>–>
      </permissionGroup>
</permissionSet>

<permissionSet type="cm:content" expose="selected">
       …..
<permissionGroup name="Emailer" extends="true" expose="true"/>
   …..
</permissionSet>

<permissionSet type="cm:folder" expose="selected">
       …..
<permissionGroup name="Emailer" extends="true" expose="true"/>
   …..
</permissionSet>

and in webclient.properties I added the display label
Emailer=Emailer

so if I set this role for an user (Alice) in another user's(Bob) inbox space then when Alice tries to email Bob i get bob@mydomain.com is not a valid node error.
If I switch the role to Editor than I can email just fine so I assume I am missing an includePermissionGroup statement which is strange because all I wanted Emailer to do is write in the space … maybe it's a special permissionGroup that allows the user to find/see the inbox so he can write to it but not necessarily read it…

any input?

thanks
Maria

Re: Alfresco 3.3g IMAP configuration

mrogers — Tue, 30 Nov 2010 15:31:01 GMT

Do you have an email alias for "bob"?

Re: Alfresco 3.3g IMAP configuration

mariam — Thu, 02 Dec 2010 08:17:01 GMT

Yes. Bob's INBOX has the email alias bob.

Re: Alfresco 3.3g IMAP configuration

mariam — Thu, 02 Dec 2010 12:21:06 GMT

managed to identify which permission groups are necessary in order to allow sending emails between users but still can't figure out how to remove the "read" access
if I remove the Read group then I get user@mydomain.com does not reference a valid accessible node (although all user's inboxes have email aliases)
if i remove the AddChildren group I get user1@mydomain.com has been denied access to user2@mydomain.com

      <!– custom permission group–>

        <permissionGroup name="Emailer" expose="true" allowFullControl="false" >

        <includePermissionGroup type="sys:base" permissionGroup="Write"/>
   <includePermissionGroup type="sys:base" permissionGroup="Read"/>
   <includePermissionGroup permissionGroup="AddChildren" type="sys:base"/>

       </permissionGroup>

having the AddChildren permission group isn't too bad since it does not grant read access to the inbox but I want to be able to remove the Read permission group so is there a way to do that from configurations or do I have to make changes in the code?

thanks
Maria

Re: Alfresco 3.3g IMAP configuration

mrogers — Thu, 02 Dec 2010 13:55:50 GMT

You will have to make changes in the code since you will be "breaking" existing security to write to a mailbox that you don't have permissions to read. And I'd encourage you to put your requirements and thoughts onto the JIRA issue mentioned above so this can be considered properly.

You will have to do the search for the destination and the writing as the "system" user.
I'd hack EmailServiceImpl.processMessage if I were you. :twisted: Or spring in your own implementation of EmailService if you want to do it cleanly without changing alfresco code.

Re: Alfresco 3.3g IMAP configuration

mariam — Fri, 03 Dec 2010 14:29:00 GMT

do you happen to know where the thrown exceptions are logged?

alfresco.log does not show anything when thunderbird throws the error with "not a valid accessible node"…

thanks
Maria

Re: Alfresco 3.3g IMAP configuration

mrogers — Fri, 03 Dec 2010 14:49:55 GMT

The exception is not logged. Its handled and a response is given back to the client.

Re: Alfresco 3.3g IMAP configuration

mariam — Fri, 03 Dec 2010 14:56:59 GMT

and if I want to log it, what should I do?

I tried adding dev-log4j.properties but still no logging …

here are the changes I made in the code in EmailServiceImpl.java:

import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
public class EmailServiceImpl implements EmailService
{
private static Log logger = LogFactory.getLog(EmailServiceImpl.class);
private void processMessage(final NodeRef nodeRef, final EmailMessage message)
    {
         logger.error("show error here");
         …….
   }
}
but alfresco.log shows nothing ..

Re: Alfresco 3.3g IMAP configuration

mrogers — Fri, 03 Dec 2010 15:48:26 GMT

That should work.

Check your "dev-log4j.properties" is in the right place. which is <extension classpath>/alfresco/extension
And your extension classpath is configured in tomcat.

Then check that there's a root logger at the top like this…
log4j.rootLogger=info, Console, File

or individual log statements like
log4j.logger.org.alfresco.email.server=debug

Then it should work like mine :wink:

Re: Alfresco 3.3g IMAP configuration

sim2487 — Tue, 22 May 2012 07:31:26 GMT

how i integrate Alfresco with Mozilla thunderbird ?
What setting i have to do on Thunderbird side ?