I'm having a bit of an issue setting the ACLs on a shared mailbox. Specifically, once subscribed to a shared mailbox with write access, a user can, in Thunderbird, click and drag the shared mailbox into that user's own "Inbox" top level folder, which causes the entire top level shared mailbox to become a sub mailbox (subfolder) of that users personal Inbox. This prevents all of the other users from accessing it.
If I use sam TestBox user1 lrs, the user cannot move the mailbox as described, but also cannot delete messages or insert messages from other accounts which this user needs to do.
If I use sam TestBox user1 lrsiwc the user can use the mailbox with full read write access, but the user can also move the shared mailbox into their personal Inbox.
I'm not too fond of the idea of telling users, "please be careful not to accidentally drag the shared mailboxes around". The system need to give users write access to messages but prevent them from restructuring top level mailboxes from the client.
Is this a known issue or a configuration problem?
UPDATE::
It looks like "lrswid" is pretty close, but it prevents the creation of sub-folders. Does the "c" permission control rename, move, and sub-folders altogether? It seems like this should be more granular.
