[Tickets #4480] Only allow editing of your own ACLs

[bugs@bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: https://dev.horde.org/horde/whups/ticket/?id=4480
-----------------------------------------------------------------------
 Ticket             | 4480
 Updated By         | Matt Selsky <selsky at columbia.edu>
 Summary            | Only allow editing of your own ACLs
 Queue              | IMP
 Version            | HEAD
 Type               | Enhancement
 State              | Assigned
 Priority           | 1. Low
 Owners             | Horde Developers, Matt Selsky
-----------------------------------------------------------------------


Matt Selsky <selsky at columbia.edu> (2006-10-03 10:47) wrote:

> Neither, the method should be used as is, and you patch looks like it 
> does this. I don't exactly follow the logic without applying the 
> patch, but do you have in mind that the driver could connect as a 
> regular user or the cyrus user?
> Beside that, that authentication stuff has to go into a separate 
> private method to avoid the code duplication.

Currently the driver connects as a regular user.  No special access is
needed for the MYRIGHTS command.  I'll refactor the authentication code.