roundcube / roundcubemail

The Roundcube Webmail suite
https://roundcube.net
GNU General Public License v3.0
5.77k stars 1.62k forks source link

End users cannot create Trusted Senders. Defaults to Contacts. #8629

Open soahead opened 2 years ago

soahead commented 2 years ago

I am an end-user only. End users cannot create Trusted Senders. A new Create defaults to Contacts and cannot be moved into Trusted Senders. Can you manually add email addresses to Trusted Senders? trusted-senders If not, how are Trusted Senders records added to the list?

alecpl commented 2 years ago

You cannot add contacts to this special addressbook. This source is used when Preferences > Displaying Messages > Allow remote resources (images, styles) is set to "from trusted senders". When you open a mail messages from an untrasted sender and it contains remote resources you'll see a warning box with buttons that allow to add the sender to this addressbook.

I'll leave this ticket open, maybe there's a place for improvement to make it less confusing.

headbank commented 7 months ago

I hope this doesn't qualify as a threadjack, but I just ran up on this and experienced some confusion myself. I wondered why choosing the above pref ("from trusted senders") had no effect; that is, no "Always allow..." button to accompany the "Allow" button on qualifying messages.

Eventually worked out that I need $config['show_images'] = 3; in site config or else adding trusted senders is not allowed.

I'd configured "Always ask" in initial site setup, but seeing the "from trusted senders" option in the UI made me believe I was being enabled to override that. Confusing (to me).

Seems to me that the UI option should not be available if it is overruled by sitewide config.

abcbarryn commented 1 month ago

This is very confusing since there is also an option for this on a per user setting, plus even with the sitewide configuration turned on you still can't add an address to the trusted senders and previously allowed message senders don't get added there. In fact the address book screen when trusted senders is displayed sys to click add to add an entry but then it only allows you to add to the personal address book, so I guess I have to wait to receive a new message with blocked images and click allow before I can even test this?