Re: [secdir] SECDIR Review of draft-ietf-morg-multimailbox-search-06

[Samuel Weiler <[e-mail]>]

On Tue, 22 Feb 2011, Phillip Hallam-Baker wrote:

> This document makes a minor adjustment to the search mechanism of 
> imap, allowing searches to be made slightly more efficiently.


If the user specifies some mailbox(es) which she doesn't have access 
rights to AND some mailbox(es) which she can access, the doc says to 
IGNORE the ones she can't access.  Wouldn't it be more useful to send 
an error for those mailboxes rather than silently fail?

Also, the security considerations says:

    Implementations MUST, of course, apply access controls appropriately,
    limiting a user's access to ESEARCH in the same way its access is
    limited for any other IMAP commands.  This extension has no data-
    access risks beyond what may be there in the unextended IMAP
    implementation.

Are there any other IMAP commands that access multiple mailboxes at 
once?  If not, if might be worth repeating some of the text in section 
2, just to call out the new case that must be checked.