[Tickets #6778] Re: Unauthenticated access to public calendar subscription URL

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/6778
-----------------------------------------------------------------------
 Ticket             | 6778
 Updated By         | it-horde at isoc.org
 Summary            | Unauthenticated access to public calendar
subscription URL
 Queue              | Kronolith
 Version            | 2.2
 Type               | Bug
 State              | Not A Bug
 Priority           | 2. Medium
 Milestone          |
 Patch              |
 Owners             |
-----------------------------------------------------------------------


it-horde at isoc.org (2008-05-30 04:28) wrote:

I've now reproduced the issue on a second, clean install of Horde +
Kronolith.

The permission system works fine for the calendar Display URL. However,
accessing ANY of the ical Subscription URLs always causes a "Horde WebDAV"
prompt for authentication - even if the calendar (and Kronolith) is set up
with Guest READ and SHOW rights. It looks like WebDAV is not accepting
anonymous GETs.

Another issue also shows up:
- an anonymous user loads one of the calendar Display URLs
- calendars are listed according to permissions
- user clicks one of the 'i' info icons
- the popup info box is displayed, but shows only a Close button - the
calendar Subscription URL is not shown

I need to be able to allow users to create public calendars that can be
subscribed to without the need for any authentication.