[Tickets #7384] Re: Users of shared hosting can see calendars of other users

bugs at horde.org bugs at horde.org
Thu Apr 16 21:35:18 UTC 2009


DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/7384
------------------------------------------------------------------------------
  Ticket             | 7384
  Updated By         | mattjbarlow at gmail.com
  Summary            | Users of shared hosting can see calendars of other
                     | users
  Queue              | Kronolith
  Version            | 2.3-RC1
  Type               | Enhancement
  State              | Duplicate
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


robot.terror at gmail.com (2008-10-06 00:30) wrote:

Please note, the issue is not limited to Kronolith only but to any and  
all Horde components using the "lib/Horde/Perms/UI.php" library and  
the "templates/shares/edit.inc" form to allow sharing with "default",  
A.K.A., "All Authenticated Users".

Currently, Kronolith, MNemo and Turba share data between users of  
diferent domains on the same server. That is, there is no evident way  
to isolate users of virtual domains.






More information about the bugs mailing list