:{
    my $imap = $DB->get('imap');
    return "deny" unless defined $imap;

    my $access = $imap->prop('access') || "private";
    return ($access eq "public") ?
	qq(allow,CVM_ACCOUNT_SPLIT_CHARS="",CVM_SASL_PLAIN="cvm-local:/var/lib/cvm/cvm-unix-local.socket",) .
	    qq(IMAP_CAPABILITY="SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN LISTEXT LIST-SUBSCRIBED")
	: "deny"
}
