- Shipped
- August 11, 2026 at 3:47 AM UTC
- Author
- Kamo
- Commit
- 554e796
Dovecot needs a byte figure per mailbox, but storage is one organization-wide pool across eighteen domains. The division has to hold one property above all — the shares must sum to no more than the capacity, so mail alone can never take an organization past its ceiling however full every mailbox gets. Also pins the two failing-open cases: an unlimited plan and an organization with no capacity both write 0, which the user_query turns into a NULL quota_rule and Dovecot reads as no limit. Refusing mail for an organization whose billing rows are missing or mid-migration is not a defensible way to be wrong.