ABOUT
-----
The Basic webmail module allows one to read and write e-mail through an IMAP
mail server. There are not a lot of fancy features (thus the name), just a
usable webmail client.


INSTALLATION
------------
Install the module in the usual way, which is documented on this page:
http://drupal.org/documentation/install/modules-themes


CONFIGURATION
-------------
The configuration settings are on the admin/settings/basic_webmail page.


PERMISSIONS
-----------
There are three permission settings available for this module:
  administer basic_webmail:
    This permission allows a priviledged user to access the various
    configuration settings of this module.
  access basic_webmail:
    This is the basic access permission to the normal use areas for viewing and
    sending email.
  access users' email addresses:
    This permission gives users sending emails with Basic webmail access to the
    email addresses of the users of your site. It is used for automatically
    populating the To, CC, and BCC fields of the send mail form. If you don't
    want everyone having access to all the users' email address on your site,
    then do not give anonymous or authenticated users this permission.


SECURITY CONCERNS
-----------------
This module stores users' email account password in plain text in the data
column of the users table. If you choose the "Use the user's account e-mail
address and password for checking e-mail." option in the configuration settings,
this means that their website password is the same as their email password and
is stored as plain text in the database. If you are using this module in a
closed or controlled environment (like for inter-office email), this may not be
too much of an issue. If you would prefer that the users' passwords were not so
accessible, this module will utilize either the Encryption
(http://drupal.org/project/encrypt) or AES encryption
(http://drupal.org/project/aes) modules to encrypt and decrypt the users' email
passwords, as necessary. Please note that if you enable encryption after using
this module, users will have to re-save their passwords for the encryption to
start.

Also, if you do not want people to have access to the email addresses of the
users on your site, then be careful which roles you give the "access users'
email addresses" permission. That permission gives users sending emails with
Basic webmail access to the email addresses of the users of your site through
the automatic populating the To, CC, and BCC fields of the send mail form.


AUTHOR
------
Jason Flatt
drupal@oadaeh.net
http://drupal.org/user/4649
