Issue Description
In settings → Files & Sharing → Sharing “Allow Directory Queries” toggle is ignored, even after executing “Reload server settings”
Expected Behavior
When toggle is deselected, no other server addresses should be shown.
Actual Behavior
The toggle is unchecked but I can list all addresses in the server, even different domains (Using bulwark, and is specially visible when trying to share a calendar, it happens in ihasmail too)
Is any known issue?
I only was able to prevent that behaviour with custom role, I created a new role as Extended role from “User” and then adding “JMAP: Search for principals matching criteria” in disabled Permissions section.
in that case can’t list other accounts… as negative effect I can’t share anything neither (at least using included share option in this web clients)
Reproduction Steps
Try to list principals using jmap client, ihashmail or bulwark in instance.
Go to a calendar and try to “share” you can then list all server email addresses.
Stalwart Version
v0.16.x
Installation Method
Binary (Linux)
Database Backend
MySQL
Blob Storage
Filesystem
Search Engine
Internal
Directory Backend
Internal
Additional Context
ihasmail v2026.9.3
bulwark (happens in all version from 1.92 to version 1.11.2)
I have reviewed the documentation and FAQ and confirm that my issue is NOT addressed there.
on
I have searched this support forum (open and closed topics) and confirm this is not a duplicate.
on
I understand that topics in this category are triaged by a bot first but a human reply will follow up. If I’d prefer a human-only reply, I’ll add the no-ai tag to my topic.
on