[kronolith] System Calendar Permissions - non-authenticated users seem to be able to edit events without logging in even when flagged as show and read only.
Jan Schneider
jan at horde.org
Tue May 3 14:06:50 UTC 2011
Zitat von Jan Schneider <jan at horde.org>:
> Zitat von gimili <gimili17 at gmail.com>:
>
>> On 5/03/11 6:12 AM, Jan Schneider wrote:
>>>
>>> Zitat von gimili <gimili17 at gmail.com>:
>>>
>>>> I created a system calendar. I love the way it removes the
>>>> calendar from a particular user. I did the following:
>>>> 1. set permissions for Kronolith as show and read only for guests
>>>> 2. for the system calendar I set show and read for guests.
>>>> Problem is non-authenticated guest users who have not logged in
>>>> seem to be able to edit all events. Did I miss something?
>>>
>>> Fixed.
>>>
>> That was fast. Thanks! The edit tab is now gone. Another tweak
>> for consideration: "Save As New" tab is still showing and it throws
>> an error: "Fatal error: Call to a member function hasPermission()
>> on a non-object in /var/www/horde/kronolith/add.php on line 42" if
>> you try to use it. I tried it a couple of times and it doesn't
>> seem to do any harm.
>
> Where/how do you see that tab? I don't.
Nevermind, found and fixed.
Jan.
--
Do you need professional PHP or Horde consulting?
http://horde.org/consulting/
More information about the kronolith
mailing list