Record what Administration proved on the live server #339

New Issue

Closed

opened 2026-09-13 23:45:16 +00:00 by jcoffey-dev · 0 comments

jcoffey-dev commented

2026-09-13 23:45:16 +00:00

Owner

Summary

Documentation only.

KNOWN-ISSUES.md. The two "read from source, not yet tested" Administration entries are replaced with what the live run on 2026-09-13 established:

What went wrong: the type vs @type filter (fixed in #336), and why the mock let it through.
Confirmed live:
- permission names are camelCase (641 for an admin);
- admin x: calls work with the proxied Basic credential;
- account and domain shapes match the code;
- automatic DKIM keys appear on a new domain;
- the zone file format, with split TXT and TLSA rows;
- DKIM keys can be looked up by domainId;
- the catch-all address wants a full address;
- objectIsLinked and its linkedObjects shape;
- reserved TLDs are refused.
Still unproved: signing in with an administrator-set password, and the grant-check gap behind the read-only guard.

Two new entries:

invalidPatch refusals show Stalwart's English text untranslated.
Administration is refused for untrusted devices and when ADMINISTRATION=0, enforced at the proxy, including the fast path that only reads bodies that could name a registry method.

README.md. Administration is added to "What's in it", and MOCK_ROLE to the mock's switches (now four).

Translations

No user-visible strings added or changed.

Merged 2026-09-13 as coffey-labs/ihasmail@822314e8b7

_{Rebuilt from: git history, session transcript.}

## Summary Documentation only. **KNOWN-ISSUES.md.** The two "read from source, not yet tested" Administration entries are replaced with what the live run on 2026-09-13 established: - **What went wrong:** the `type` vs `@type` filter (fixed in #336), and why the mock let it through. - **Confirmed live:** - permission names are camelCase (641 for an admin); - admin `x:` calls work with the proxied Basic credential; - account and domain shapes match the code; - automatic DKIM keys appear on a new domain; - the zone file format, with split TXT and TLSA rows; - DKIM keys can be looked up by `domainId`; - the catch-all address wants a full address; - `objectIsLinked` and its `linkedObjects` shape; - reserved TLDs are refused. - **Still unproved:** signing in with an administrator-set password, and the grant-check gap behind the read-only guard. Two new entries: - `invalidPatch` refusals show Stalwart's English text untranslated. - Administration is refused for untrusted devices and when `ADMINISTRATION=0`, enforced at the proxy, including the fast path that only reads bodies that could name a registry method. **README.md.** Administration is added to "What's in it", and `MOCK_ROLE` to the mock's switches (now four). ## Translations No user-visible strings added or changed. **Merged** 2026-09-13 as coffey-labs/ihasmail@822314e8b731 <sub>Rebuilt from: git history, session transcript.</sub>

This repo is archived. You cannot comment on issues.

1 Participants

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: coffey-labs/ihasmail-github-archive#339