Expose credential-inheritance policy and repair credential references / IMAP mailbox encoding #23

New Issue

2026-09-07T14:07:04+02:00

zemion commented

2026-09-07 14:07:04 +02:00

User-reported usability regressions, 2026-09-07. Local implementation in existing working tree; NOT pushed or closed.

Missing SMTP/IMAP credential-inheritance controls made enforced explicit-selection policy undiscoverable. The common Mail policy editor now shows local/inherited/effective values, source paths and ancestor locks, with stable API override keys. Explicit campaign selection remains a Mail-owned credential ID, never inline secrets.
Shared public server-reference catalogue no longer lets one cancelled subscriber poison other subscribers; failures can recover when reopening the editor, and delta removals use the canonical ID.
IMAP modified UTF-7 mailbox names decode for display and encode/quote for SELECT/STATUS/APPEND, honoring only activated UTF8=ACCEPT. Existing encoded folder configurations resolve against authenticated LIST metadata without blind rewriting.
Failed policy saves preserve drafts; successful writes followed by refresh failure remain acknowledged. EN/DE module documentation updated.

Verification: full documented Mail unittest suite 187 passed; policy/authorization tests and 8 actual policy-browser cases passed; 6 actual reusable-credential browser cases passed earlier. No live provider connections or mail delivery effects were used.

User-reported usability regressions, 2026-09-07. Local implementation in existing working tree; NOT pushed or closed. - Missing SMTP/IMAP credential-inheritance controls made enforced explicit-selection policy undiscoverable. The common Mail policy editor now shows local/inherited/effective values, source paths and ancestor locks, with stable API override keys. Explicit campaign selection remains a Mail-owned credential ID, never inline secrets. - Shared public server-reference catalogue no longer lets one cancelled subscriber poison other subscribers; failures can recover when reopening the editor, and delta removals use the canonical ID. - IMAP modified UTF-7 mailbox names decode for display and encode/quote for SELECT/STATUS/APPEND, honoring only activated UTF8=ACCEPT. Existing encoded folder configurations resolve against authenticated LIST metadata without blind rewriting. - Failed policy saves preserve drafts; successful writes followed by refresh failure remain acknowledged. EN/DE module documentation updated. Verification: full documented Mail unittest suite 187 passed; policy/authorization tests and 8 actual policy-browser cases passed; 6 actual reusable-credential browser cases passed earlier. No live provider connections or mail delivery effects were used.

zemion commented

2026-09-08 05:23:53 +02:00

Reconciled 2026-09-08: implemented and published

This supersedes the earlier local/unpublished status. The owning fix is on remote main and the verified v0.1.27 tag (commit 480c18c67cc3), included in the published 0.1.45 source/package composition.

The common Mail profile editor exposes inherited/local/effective credential policy; shared public references recover correctly from cancellation/delta removal; IMAP modified UTF-7 display and wire handling honor negotiated UTF8=ACCEPT. Backend encoding/profile tests and actual mail-credential-policy.spec.ts / credential-references.spec.ts conformance passed. Saving behavior and EN/DE Mail documentation are included. No live provider connection or credential/policy change was made for this audit.

The completed, unmodified release tools/checks/check-focused.sh run passed, including 213 browser conformance cases and the relevant backend suites. The audit matched current remote branches/tags and reviewed the original acceptance criteria and subsequent comments. Closing the implemented source/package scope. This is not a runtime deployment claim: Meta #52 and website #9 retain their independent runtime/public-site holds. No tag was moved.

## Reconciled 2026-09-08: implemented and published This supersedes the earlier local/unpublished status. The owning fix is on remote `main` and the verified [`v0.1.27` tag](https://git.add-ideas.de/GovOPlaN/govoplan-mail/src/tag/v0.1.27) ([commit `480c18c67cc3`](https://git.add-ideas.de/GovOPlaN/govoplan-mail/commit/480c18c67cc345b462ec9dd0dde252fbfc13f571)), included in the published [0.1.45 source/package composition](https://git.add-ideas.de/GovOPlaN/govoplan/src/commit/88b685ff5e689acf096bdfc7084bd108e801e86e/docs/releases/0.1.45.md). The common Mail profile editor exposes inherited/local/effective credential policy; shared public references recover correctly from cancellation/delta removal; IMAP modified UTF-7 display and wire handling honor negotiated UTF8=ACCEPT. Backend encoding/profile tests and actual `mail-credential-policy.spec.ts` / `credential-references.spec.ts` conformance passed. Saving behavior and EN/DE Mail documentation are included. No live provider connection or credential/policy change was made for this audit. The completed, unmodified release `tools/checks/check-focused.sh` run passed, including 213 browser conformance cases and the relevant backend suites. The audit matched current remote branches/tags and reviewed the original acceptance criteria and subsequent comments. Closing the implemented source/package scope. This is not a runtime deployment claim: [Meta #52](https://git.add-ideas.de/GovOPlaN/govoplan/issues/52) and [website #9](https://git.add-ideas.de/add-ideas/addideas-govoplan-website/issues/9) retain their independent runtime/public-site holds. No tag was moved.

zemion closed this issue

2026-09-08 05:23:53 +02:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: GovOPlaN/govoplan-mail#23