jmap_api.c: apply implicit owner rights in JMAP API

cyrusimap · Jan 15, 2025 · b2bf7b6 · b2bf7b6
1 parent ad34908
commit b2bf7b6
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/imap/jmap_api.c b/imap/jmap_api.c
@@ -449,6 +449,11 @@ static struct mbstate *_mbstate_getoradd(struct auth_state *authstate,
         mboxlist_entry_free(&parententry);
     }
     else mbstate->rights = httpd_myrights(authstate, mbentry);
+
+    if (auth_memberof(authstate, mbname_userid(mbname)) == 3) {
+      mbstate->rights |= config_implicitrights;
+    }
+
     mbname_free(&mbname);
 
     hash_insert(mbentry->name, mbstate, mbstates);