Disabling Zimbra View Mail Button on Administrator Console

I’ve been searching for a solution to disable the “View Mail” button in Zimbra’s Administrator control panel. I think this “View Mail” button is not necessary and further more it is privacy breach as administrator can see all emails inside an email account.

The new version 6.0 Network Edition seems to be able to do that as it already has Role Based delegation. However, since there are only less than 10 persons that going to use the mail server, I don’t think NE edition is necessary for me.

Currently I’m testing the open source edition of Zimbra 6.0 and have been looking at its code, but unfortunately I can’t find a way to disable or at least hide that “View Mail” button.

I joined the Zimbra forum and shoot a question there but it seems the community has no idea either on how to disable it. Zimbra is open source so I think it should be able to be modified, it just a matter of removing a button from its GUI, it’s not changing the functionality of its core code.

I’ll spend some more time to investigate on how to do this and post the result on next blog post.

12 thoughts on “Disabling Zimbra View Mail Button on Administrator Console”

  1. Hello. Will they succeed? I need to find a way to hide or disable the option to view zimbra administrator email.

  2. Just tested on ZCS 6.0 open edition, and it worked like a champ.

    PS: You must firstly create the admin account and set password using the admin console, then you open the shell and run the 3 lines

    #zmprov ma user@domain.com zimbraIsDelegatedAdminAccount TRUE zimbraAdminConsoleUIComponents
    cartBlancheUI
    #zmprov grr global usr user@domain.com +adminConsoleRights
    #zmprov grr global usr user@domain.com -adminLoginAs

  3. I get this error after entering the second command:
    ———–
    ./zmprov ma user@domain zimbraIsDelegatedAdminAccount FALSE zimbraAdminConsoleUIComponents cartBlancheUI
    ./zmprov grr global usr user@domain +adminConsoleRights
    ERROR: service.INVALID_REQUEST (invalid request: grantee for admin right or for user right with the can delegate modifier must be a delegated admin account or admin group, it cannot be a global admin account or a regular user account.)
    ./zmprov grr global usr user@domain -adminLoginAs
    ERROR: service.INVALID_REQUEST (invalid request: grantee for admin right or for user right with the can delegate modifier must be a delegated admin account or admin group, it cannot be a global admin account or a regular user account.)
    ———-

    Any comments on how to fix this and to eliminate the “View mail”?

    thanks

  4. I have a similar problem. I hope your understand for posting here.

    In Zimbra 8 Open Source, I’m trying to create a user domain administrator, who will be allowed only in its domain and can create accounts and lists.
    Executing the commands below, I even can create domain administrator, but I still have two problems:
    1 – I do not want the domain administrator can change the quota. Currently it does not change the existing user quota, but can change the quota when create a new user.
    2 – When creating a new user is not showing the field to enter the password.

    I thank anyone who can help me.
    I’m from Brazil, sorry for my english.
    ************

    zmprov ma test@zzwx.com zimbraAdminConsoleUIComponents accountListView zimbraAdminConsoleUIComponents DLListView

    zmprov ma test@zzwx.com zimbraIsDelegatedAdminAccount TRUE
    zmprov ma test@zzwx.com +zimbraAdminConsoleUIComponents accountListView
    zmprov grr domain zzwx.com usr test@zzwx.com domainAdminRights
    zmprov grr domain zzwx.com usr test@zzwx.com +deleteAccount
    zmprov grr domain zzwx.com usr test@zzwx.com +listAccount
    zmprov grr domain zzwx.com usr test@zzwx.com +renameAccount
    zmprov grr domain zzwx.com usr test@zzwx.com +setAccountPassword
    zmprov grr domain zzwx.com usr test@zzwx.com createAccount
    zmprov grr domain zzwx.com usr test@zzwx.com listDomain
    zmprov grr domain zzwx.com usr test@zzwx.com set.account.zimbraAccountStatus
    zmprov grr domain zzwx.com usr test@zzwx.com set.account.sn
    zmprov grr domain zzwx.com usr test@zzwx.com set.account.displayName
    zmprov grr domain zzwx.com usr test@zzwx.com set.account.zimbraPasswordMustChange
    zmprov revokeRight domain zzwx.com usr test@zzwx.com configureQuota

  5. Please help me… I have delegated admin for secondary domain who can administrer all. I want that this admin can view mail for the user account of the domain who can administer.
    I thank anyone who can help me.

Leave a Reply

Your email address will not be published. Required fields are marked *