[Tickets #11595] selective rw access to addressbooks : Edit "my" contact but make all other contacts readonly

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/11595
------------------------------------------------------------------------------
  Ticket             | 11595
  Created By         | Ralf Lang (B1 Systems GmbH) <lang at b1-systems.de>
  Summary            | selective rw access to addressbooks : Edit "my" contact
                     | but make all other contacts readonly
  Queue              | Turba
  Version            | Git master
  Type               | Enhancement
  State              | New
  Priority           | 1. Low
  Milestone          | 5.1
  Patch              |
  Owners             |
------------------------------------------------------------------------------


Ralf Lang (B1 Systems GmbH) <lang at b1-systems.de> (2012-10-30 14:59) wrote:

Currently, we use a shared readonly addressbook as an  
organisation-wide GAL. To allow users to edit their own entry, we  
provide an RW accessible second addressbook "me" which contains only  
one entry (by filter).

This makes the user experience a little bit confusing but I found no  
better configuration in existing code.

I'd like to either implement a backend option or an ACL/permission to  
allow filtering which entries a user/group has write access to.

Another option would be to make the UI recognize which ACLs are  
granted to the LDAP bind user but this is probably too much  
introspection and too slow.