[kronolith] how to re: Added calendar widgets embeddable into external websites

[Michael Rubinsky]

Quoting Chuck Hagenbuch <chuck at horde.org>:

> Quoting Andrew Morgan <morgan at orst.edu>:
>
>> Okay, the EDIT and DELETE permissions don't do anything when set on  
>> the application itself?  For Turba and IMP I have all the  
>> permissions set for Authenticated Users and nothing set for Guests.  
>>  For Kronolith I have all the permissions set for Authenticated  
>> Users and only SHOW and READ for guests (to enable access to  
>> freebusy info, I think).
>>
>> Is it safe to remove EDIT and DELETE from Authenticated Users for  
>> all the applications, with the understanding that they are not used?
>
> Yes, that is safe. I suppose at some point there might be  
> functionality that makes sense to attach to those permissions, but  
> I'm not imagining what those might be right now.

FWIW, I know that at least in Ansel, we use do a PERMS_EDIT check  
before allowing the creation of any galleries.


Thanks,
mike

--
The Horde Project (www.horde.org)
mrubinsk at horde.org

"Time just hates me. That's why it made me an adult." - Josh Joplin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: PGP Digital Signature
URL: <http://lists.horde.org/archives/kronolith/attachments/20081002/a6f96f72/attachment.bin>