[kronolith] System Calendar Permissions - non-authenticated users seem to be able to edit events without logging in even when flagged as show and read only.

Jan Schneider jan at horde.org
Tue May 3 13:18:01 UTC 2011


Zitat von gimili <gimili17 at gmail.com>:

> On 5/03/11 6:12 AM, Jan Schneider wrote:
>>
>> Zitat von gimili <gimili17 at gmail.com>:
>>
>>> I created a system calendar.  I love the way it removes the  
>>> calendar from a particular user.  I did the following:
>>> 1.  set permissions for Kronolith as show and read only for guests
>>> 2.  for the system calendar I set show and read for guests.
>>> Problem is non-authenticated guest users who have not logged in  
>>> seem to be able to edit all events.  Did I miss something?
>>
>> Fixed.
>>
> That was fast.  Thanks!  The edit tab is now gone.  Another tweak  
> for consideration: "Save As New" tab is still showing and it throws  
> an error: "Fatal error: Call to a member function hasPermission() on  
> a non-object in /var/www/horde/kronolith/add.php on line 42" if you  
> try to use it.  I tried it a couple of times and it doesn't seem to  
> do any harm.

Where/how do you see that tab? I don't.

Jan.

-- 
Do you need professional PHP or Horde consulting?
http://horde.org/consulting/



More information about the kronolith mailing list