The emails are stored in Benno MailArchiv in a logically flat structure. The entire system only contains the sub-level of the containerto which an email is assigned.

This assignment is defined in the configuration file /etc/benno/benno.xml using the parameters of the configuration of the respective container.

From a logical perspective, no further structuring takes place within a container. Searching and displaying results is handled by the REST daemon and occurs directly at the container level.

The REST daemon thus has access to all emails in the container. Access permissions are enforced at this level.

A search query to the REST daemon returns a list of hits containing the internal IDs of the found emails. The REST interface then displays the respective email.

Permissions are enforced directly during the search. The search query parameters are used internally to filter the email addresses valid for this request and send them to Lucene.

This filter is set when the user logs in and cannot be changed.

Die für den Benutzer gültigen E-Mail Adressen sowie der zugeordnete Container werden beim Anlegen des Benutzers festgelegt. Für den Benutzer hansen wurden beispielsweise die Adressen

• hansen@hansen-und-meyer.de
• p.hansen@hansen-und-meyer.de

determined.

Upon login, these addresses are retrieved from the user database and set as a filter. The user can only find emails where one of their assigned addresses is listed as either the sender or recipient.

If an email address is to be shared with another user, it will be added to their account. These configuration options allow, for example, the assignment of a department's email address to its users.

Die Filter werden intern mit der Query-Syntax von Lucene implementiert. Somit sind hier Wildcards (*) möglich, um einem User beispielsweise Zugriff auf eine komplette Sub-Domain zu ermöglichen.