jcoffey-dev
c2ea132d3a
In an account that shared something with them, an administrator's JMAP reads now go through the share like anyone else's: Mailbox/get, Calendar/get, AddressBook/get and FileNode/get list only what was shared, with the share's myRights, and mail, events, contacts, files, threads, changes, free/busy and blob downloads stay inside it. Before, Impersonate made the administrator the owner of every account, so clients listed every calendar of a sharing account as shared, with full rights, and loaded its private events. A share grant also counts only for its own principal and its groups now. Matching it with is_member made an Impersonate holder every grantee. Writes still follow is_member, and so does any account that hasn't shared with the administrator. The audit record for an administrator in a sharing account stays as GHSA-m992-gp7g-wc2j left it. Fixes #186