From 1e9daf1ff116962815113ffe03829c5bc387988f Mon Sep 17 00:00:00 2001
From: Maurus Decimus <11444311+mdecimus@users.noreply.github.com>
Date: Thu, 16 Apr 2026 21:24:18 +0200
Subject: [PATCH] Fix ACL SET permission override

---
 CHANGELOG.md              | 5 ++++-
 crates/imap/src/op/acl.rs | 2 +-
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9425f045..5b0698f8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -79,7 +79,10 @@ This version includes **multiple breaking changes**. If you are upgrading from v
 - JMAP: 
   - Fix `inMailboxOtherThan` query logic.
   - Fix `hasAttachment` search field (#2778)
-- IMAP: Increment argument max length to `8000` bytes
+- IMAP: 
+  - Increment argument max length to `8000` bytes
+  - ACL: Add `RIGHTS` capability (#2762)
+  - ACL: Fix `ACL SET` permission override.
 - WebDAV: Return `304` `NOT_MODIFIED` on `If-None-Match`
 - Configuration: Prefix parsing issues (#2495)
 - OIDC: JWKS Exposes Symmetric Signing Key
diff --git a/crates/imap/src/op/acl.rs b/crates/imap/src/op/acl.rs
index 3eeaf8c8..8dec273c 100644
--- a/crates/imap/src/op/acl.rs
+++ b/crates/imap/src/op/acl.rs
@@ -265,7 +265,7 @@ impl<T: SessionStream> Session<T> {
         spawn_op!(data, {
             // Validate mailbox
             let (mailbox_id, current_mailbox, _) = data
-                .get_acl_mailbox(&arguments, false)
+                .get_acl_mailbox(&arguments, true)
                 .await
                 .imap_ctx(&arguments.tag, trc::location!())?;
             let current_mailbox = current_mailbox