Definition

Specifies the access control rights granted for this public folder. Each value of this attribute consists of two parts separated by a space. The two parts are: an identifier, as specified in RFC 2086, and a list of access rights, mod_rights, as shown in the following table:

Table 3–15 Access Rights for a Public Folder

Allowed Characters	Name	Actions Permitted
l	lookup	Mailbox is visible to LIST/LSUB commands.
r	read	SELECT the mailbox, perform CHECK, FETCH, PARTIAL, SEARCH, COPY from mailbox.
s	seen	Keep seen/unseen information across sessions. (STORE SEEN flag)
w	write	STORE flags other than SEEN and DELETED.
i	insert	Perform APPEND, COPY into mailbox.
p	post	Send mail to submission address for mailbox (not enforced by IMAP 4 itself).
c	create	CREATE new sub-maiboxes in any implementation-defined hierarchy.
d	delete	STORE DELETED flag, perform EXPUNGE.
a	administer	Perform SETACL.

Messaging Server’s IMAP ACL implementation also defines the following new identifier:

anyone@domain

where domain is a valid domain.

If the attribute is missing, the default rights specified in the mailPublicFolderDefaultRights attribute from the mailDomain object class will be applied. If mailDomain does not contain this attribute, the following default ACL is set when a public folder is first created:

anyone@domain lrs

where domain is a valid domain.

Group identifiers start with the prefix “group=”. Do not put the group identifier prefix on a userid. The message store’s user creation code checks for this.