[Tickets #12305] CalDAV user lookup bug

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/12305
------------------------------------------------------------------------------
  Ticket             | 12305
  Created By         | horde at FreeBSD.org
  Summary            | CalDAV user lookup bug
  Queue              | IMP
  Version            | Git master
  Type               | Bug
  State              | Unconfirmed
  Priority           | 1. Low
  Milestone          |
  Patch              | 1
  Owners             |
------------------------------------------------------------------------------


horde at FreeBSD.org (2013-06-05 14:58) wrote:

I have triggered an error when using the new CalDAV functionality of  
kronolith.

If using CalDAV and authentication via IMP, imp's _init() does not get  
called in the function mentioned later. This leaves the values 'add',  
'remove', and 'list' in the capability list even if not configured in  
the driver.

framework/Dav/lib/Horde/Dav/Principals.php, function  
getPrincipalByPath() erroneously assumes that  
$this->_auth->hasCapability('list') is true and exits with an user  
does not exist exception. This way I am unable to use CalDAV.

My suggestions to fix this:
Option 1 (preferred, patch attached):
Instead of removing the "add", "list" and "remove" capabilities in  
imp/lib/Application.php when they are not supported, merge them in  
_init() if they are supported

Option 2:
call imp's _init() before checking the problem in Dav/Principals.php

Option 3:
modify the check in Dav/Principals.php to accept such a situation



horde at FreeBSD.org (2013-06-05 14:58) uploaded: imp_application.patch

http://bugs.horde.org/h/services/download/?module=whups&actionID=download_file&file=imp_application.patch&ticket=12305&fn=%2Fimp_application.patch