[Phpgroupware-users] security issue in email

[Dirk H. Schulz]

Hi there,

in the email application there is a popup called "change to folder". And 
since we have classic mailboxes together in one directory, all the 
mailboxes of all system users are shown! If I try to open the mailbox of a 
different user, email simply claims the mailbox to be empty (even if it 
isn't).

So at least the user gets a complete list of the system accounts, which I 
would like to prevent. Is there a way to prevent that?

Thanks for any hint.

Dirk