[horde] Fwd: Re: Share calendar via "private address"

[Michael J Rubinsky]

----- Forwarded message from Michael J Rubinsky  
<mike at theupstairsroom.com> -----
    Date: Tue, 15 Dec 2015 08:30:00 -0500
    From: Michael J Rubinsky <mike at theupstairsroom.com>
Subject: Re: [horde] Share calendar via "private address"
      To: horde at lists.horde.org

Quoting Frank Richter <frank.richter at hrz.tu-chemnitz.de>:

> Quoting Jan Schneider:
>>
>> Zitat von Michael J Rubinsky <mrubinsk at horde.org>:
>>
>>> Quoting Jan Schneider <jan at horde.org>:
>>>
>>>> Zitat von Michael J Rubinsky <mrubinsk at horde.org>:
>>>>
>>>>> Quoting Frank Richter <frank.richter at hrz.tu-chemnitz.de>:
>>>>>
>>>>>> Quoting Michael J Rubinsky:
>>>>>>>
>>>>>>> Quoting Frank Richter <frank.richter at hrz.tu-chemnitz.de>:
>>>>>>>
>>>>>>>> Hi,
>>>>>>>> pardon me, if this is a FAQ:
>>>>>>>>
>>>>>>>> Is there a possibility to give read access on a Kronolith  
>>>>>>>> calendar via a URL without authentication?
>>>>>>>> Like this "private address" in Google -  
>>>>>>>> https://www.google.com/calendar/ical/.../private-c0feb88c.../basic.ics
>>>>>>>>
>>>>>>>> ... and without giving access to everybody within Horde.
>>>>>>>>
>>>>>>>> Thanks,
>>>>>>>> Frank
>>>>>>>>
>>>>>>>> -- 
>>>>>>>> Frank Richter
>>>>>>>>
>>>>>>>> Chemnitz University of Technolgy, Germany
>>>>>>>
>>>>>>> https://bugs.horde.org/ticket/7775
>>>>>>
>>>>>> Hmm, I just don't know how to do this:
>>>>>>
>>>>>> just create a new share (it has a random id)  and set perms to
>>>>>> READ|EDIT|DELETE
>>>>>>
>>>>>> Is it settable via the GUI in Calendar - edit calendar ->  
>>>>>> Sharing - advanced sharing options? How?
>>>>>
>>>>> This is basically just saying to create a new publicly viewable  
>>>>> calendar. Those instructions were from long ago (Horde 3) and  
>>>>> were really just a hackish workaround and don't really make  
>>>>> sense now.
>>>>
>>>> I'm not sure why this shouldn't still work.
>>>
>>> I guess it would still work if you wanted to start with a brand  
>>> new calendar. I thought the question was rather related to giving  
>>> someone access to an existing calendar without the need for  
>>> authentication.
>>
>> Should still work, if you give all but SHOW (and maybe DELEGATE)  
>> permissions to guests, and if guest access to Kronolith in general  
>> is allowed. The only "issue" is with very old default calendars  
>> which used to have an id matching the user name, which is of course  
>> too easily guessable to be used as a private address.
>>
>
> Unfortuntely I'm still not through. According to  
> http://wiki.horde.org/GuestPerms I've set permissions for Calendar  
> (kronolith):
> Guest Permissions  Show and Read,  and for the  calendar  in  
> advanced sharing Guest Permissions Read and Edit
>
> Now, the anonymous access to the Feed URL  
> server/kronolith/feed/index.php?c=...  works
> but not to CalDAV or WebDAV/ICS Subscription URL - here my account  
> name is coded
> https://server/rpc.php/kronolith/_mylogin_/....ics
>
> curl https://server/rpc.php/kronolith/_mylogin_/....ics leeds to:
>
> <?xml version="1.0" encoding="utf-8"?>
> <d:error xmlns:d="DAV:" xmlns:s="http://sabredav.org/ns">
> <s:exception>Sabre\DAV\Exception\NotAuthenticated</s:exception>
>  <s:message>No basic authentication headers were found</s:message>
>  <s:sabredav-version>1.8.10</s:sabredav-version>
> </d:error>
>
> Still a missing bit?

Currently all RPC access to horde *requires* authentication. The RPC  
system needs to be refactored for Horde 6 to separate the  
authentication stage from the actual request/api call stage.


-- 
Mike

----- End forwarded message -----


-- 
mike
The Horde Project
http://www.horde.org
https://www.facebook.com/hordeproject
https://www.twitter.com/hordeproject
-------------- next part --------------
An embedded message was scrubbed...
From: Michael J Rubinsky <mike at theupstairsroom.com>
Subject: Re: [horde] Share calendar via "private address"
Date: Tue, 15 Dec 2015 08:30:00 -0500
Size: 4313
URL: <http://lists.horde.org/archives/horde/attachments/20151215/2701d5b1/attachment.mht>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5751 bytes
Desc: S/MIME Signature
URL: <http://lists.horde.org/archives/horde/attachments/20151215/2701d5b1/attachment.bin>