[Tickets #2074] Turba::getAddressBooks ignoring permissions parameter

[bugs@bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=2074
-----------------------------------------------------------------------
 Ticket             | 2074
 Updated By         | kevin_myer at iu13.org
 Summary            | Turba::getAddressBooks ignoring permissions parameter
 Queue              | Turba
 Version            | HEAD
 State              | Unconfirmed
 Priority           | 1. Low
 Type               | Bug
 Owners             | 
-----------------------------------------------------------------------


kevin_myer at iu13.org (2005-06-03 11:16) wrote:

Actually, I missed the return call to permissionsFilter, so I'm pretty sure
the issue lies there.

There's a bug there too (I think):

            if (Auth::isAdmin()) {
                return $in;
            }

should not return $in if the source is read-only (at least for a permission
case of PERM_EDIT).