[Tickets #8370] Restrict "change permissions" to admins

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/8370
------------------------------------------------------------------------------
  Ticket             | 8370
  Created By         | pcravero at as2594.net
  Summary            | Restrict "change permissions" to admins
  Queue              | Kronolith
  Version            | 2.3.1
  Type               | Enhancement
  State              | New
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


pcravero at as2594.net (2009-06-23 04:13) wrote:

This request comes from an organization with a large, multi-domain,  
user base (>10k).

We need the ability to restrict the possibility to 'change calendar  
permissions' only to users listed in Horde's $conf['auth']['admins'] .  
So only global admins can promote a calendar to group calendar once  
the actual need is verified.

We had patched an old version by wrapping the display of links/icons  
with "if (Auth::isAdmin()) { }" control. This might not be the right  
way to do it, and probably requires an additional configuration  
parameter to toggle this function.

Makes sense?