Linus Rath c00c7080a1 fix: give plugins the directory only with their own permission, and only confirmed team mailboxes ...

- `directory:read` for api.user.findPeople, with at least 3 characters,
  at most 20 ids, 20 results and 10 lookups a minute, in the directory
  of the account the call names; one load in flight per client.
- Plugins hear `group` only for accounts the server confirmed are group
  principals; the policy's fallback stays for the admin's scopes.
- The email.* keyword methods refuse $draft, $junk, $notjunk and
  $phishing.
- A plugin keeps at most 4 KB in a mailbox and reads it 30 times a
  minute; the email:write consent text says others in a team mailbox
  can read it.
- email.updateKeywords also changes the rows of expanded conversations.

2026-10-28 08:16:52 +01:00

..

common.json

fix: give plugins the directory only with their own permission, and only confirmed team mailboxes

2026-10-28 08:16:52 +01:00