Accessing other mailboxes - intentional/bug?

[cnic-alan]

Hi all,

I have a question about roundcube and user permissions.

It seems like this works on any account (regardless of user level rights).

If you use the system use email account, by clicking to “Settings” and  “Folders” you can subscribe to other mail accounts of this cPanel accounts.

Afterwards you would have access to their mails. Then it is possible to read, delete, move and write emails in those mailboxes.

My question is, is this intentional or it is a bug / configure issue?

[JohnDoh]

This does not sound like a Roundcube bug. Roundcube is an IMAP client it shows what ever the IMAP server tells it to. May be its a config issue with namespaces but I think its strange that an IMAP server would expose information belonging to other users just because of a namespace do I think its more likely an IMAP server config issue.

[SKaero]

It sounds like you logged into the account email box within CPanel.

The way CPanel setups the root email account it it above all other email accounts in the account so you can see email in each of them and you shouldn't see the same options if you login to each of the individual accounts.

In closing this is not a Roundcube problem its a CPanel feature(?) and outside of Roundcube's control.