KOPANO-ARCHIVER-ACLSYNC(8)

📦 version 8.7.0, in ubuntu jammy

💖 KOPANO-ARCHIVER-ACLSYNC 💖

okay bestie, so this is kopano-archiver-aclsync, straight out of the Kopano Core user reference — section 8 of the manual, system administration territory, iykyk. And yes, the name is a whole mouthful, but the vibe is genuinely simple: it syncs your archive permissions so you don't have to do it yourself. ✨

🌸 NAME 🌸

kopano-archiver-aclsync — synchronizes archive ACL settings with those of the primary store. fr fr, that's the whole job.

🎀 SYNOPSIS 🎀

kopano-archiver-aclsync [OPTION...]

🦋 DESCRIPTION 🦋

okay so picture this 💭 — a user sets permissions for other people on his or her store or folders. cool. iconic. but the moment those messages get archived, every one of those other users now needs at least read-permissions on this person's archive too, otherwise they literally cannot read the stubbed messages or get into the archive directly. 😭

and here's the annoying part: if the archive was attached without write privileges, the owner of the archive cannot set those permissions at all. and even when the user does have write permissions, having to set every single permission twice (or more, if multiple archives are attached) is such a nuisance. not the main character behaviour we're going for. 🙈

that's where kopano-archiver-aclsync comes in — it propagates the ACL settings from the primary store over to the archives. 🫶

but bestie, listen. No user will ever get more rights on a store or folder than the owner of the archive has. So if the archive was attached without write permissions, no user will get write permissions on the archive. periodt. no exceptions.

for every archived folder in an archived store, kopano-archiver-aclsync does this lil routine:

  1. first it figures out the rights for the owner of the archive
  2. then it pulls all the entries from the ACL of the current folder, except the ones belonging to the owner
  3. each right gets masked with the rights of the owner before it's added to the ACL of the archive folder

slay. 💅

✨ OPTIONS ✨

  • --user, -u NAME — run the script for just the specified user(s). by default it runs for all users, so specify this if you're being picky 💖
  • --log-level, -l NAME — specify the log-level, for example, 'error', 'warning' 'info' or 'debug'.
  • --server-socket, -s SOCKET — connect to the storage server through the specified socket.
  • --ssl-key, -k FILE — specify the SSL key file.
  • --ssl-pass, -p PASSWORD — specify the SSL key password. 🔐

👑 AUTHOR 👑

Written by Kopano. icons only, honestly. 🎀

and that's the whole page, bestie!! this one came from Kopano 8, dated November 2016, and it's the KOPANO-ARCHIVER-ACLSYNC(8) manual page from the Kopano Core user reference. go forth and sync those ACLs. 🌈💜🦋

📦 where this page comes from