[horde] Problem with sharing calendars, tasks etc in Horde CVS

[Tony Earnshaw]

People,

May I come back to a problem I had just before Christmas?

tor, 2002-12-19 kl. 17:35 skrev Tony Earnshaw:

> As an admin I can make shared objects. mnemo, nag, kronolith etc. But I
> cannot then share them with others ("permission denied"). I would have
> thought that by making Permissions and coupling these to shared objects,
> that that would have been the answer. But no.
> 
> I've gone through everything time and time again, with the horde
> "Permissions" and grepping through the horde subtree, arrived at
> horde/lib/Share.php, horde/lib/Perms.php and horde/lib/Editor.php. Basic
> debugging gives the fault in Editor.php, but damned if I come further
> than that.

Isn't solved yet. But I can brute-force it, Horde 3.0-CVS from
yesterday.

By changing horde/shares/edit.php (o.k., what I'm doing is not good,
it's only meant to force something), around line 47:
__________________________

case 'edit':
    $share = &$shares->getShareById(Horde::getFormData('cid'));
    if (!is_a($share, 'PEAR_Error')) {
        $form = 'edit.inc';
        $perm = &$share->getPermission();
    } elseif (($category = Horde::getFormData('share')) !== null) {
        $share = &$shares->getShare($category);
        if (!is_a($share, 'PEAR_Error')) {
            $form = 'edit.inc';
            $perm = &$share->getPermission();
        }
    }
$temp= "tonye";
    if (isset($share) && !is_a($share, 'PEAR_Error') &&
        //Auth::getAuth() != $share->getOwner()) {
        $temp != "tonye") {
        exit('permission denied');
    }
    break;
____________________________

I'm tonye. If I do that, I can edit permissions (though in default
colors, resolution etc, not in my own Mozilla). Without the above mod, I
still get "permission denied." If I try to save it, i still get
"permission denied."

The same applies to all other users.

I.e., here Auth::getAuth() is not working, though obviously it works in
other scripts.

So, does it have anything to do with what's in SQL Horde_categories?
Anybody any idea why?

Best,

Tony

-- 

Tony Earnshaw

When all's said and done ...
there's nothing left to say or do.

e-post:		tonni at billy.demon.nl
www:		http://www.billy.demon.nl