[turba] Fwd: [Bug 1282] New - Shared contacts list

[Chuck Hagenbuch]

Here's a nice laundry list of stuff. Most of it is misconfiguration, not
clearly stated as a problem, or already implemented. Any thoughts on the
shared contact list stuff?

----- Forwarded message from bugs at bugs.horde.org -----
    Date: Sat, 14 Jun 2003 06:45:39 -0300
    From: bugs at bugs.horde.org
Reply-To: bugs at horde.org
 Subject: [Bug 1282] New - Shared contacts list
      To: chuck at horde.org, abuse-impbugs at mayday.cix.co.uk, bugs at horde.org

http://bugs.horde.org/show_bug.cgi?id=1282

*** shadow/1282	Sat Jun 14 06:45:39 2003
--- shadow/1282.tmp.26270	Sat Jun 14 06:45:39 2003
***************
*** 0 ****
--- 1,61 ----
+ Bug#: 1282
+ Product: Horde
+ Version: 2.2 Stable
+ Platform: PHP Code
+ OS/Version: Linux
+ Status: NEW
+ Resolution:
+ Severity: enhancement
+ Priority: P2
+ Component: IMP
+ Area: BUILD
+ AssignedTo: chuck at horde.org
+ ReportedBy: abuse-impbugs at mayday.cix.co.uk
+ URL:
+ Summary: Shared contacts list
+
+ I have people using imp with the same user name on multiple servers.
+ Quite reasonably imp treats these as different and they have different
+ contact lists.
+
+ The users, however, see themselves logging in with the same user and
+ password and expect 'the computer' to see them as the same person and
+ give them their contact list.
+
+ Then there's the 'problem' of a real shared contact list
+ (eg: company clients, webmail support contacts etc)
+
+ Allowing multiple users to user the same contact lists would be easy,
+ two extra fields for the names of a private and a public contacts list
+ against each user at server combination.
+ Securely updating these fields is the nasty bit!
+
+ One simple method:
+
+ Each contact list has a name.
+
+ So they can be stored in the current table global ones would either not
+ have an @host suffix or have a suffix of @Contacts_list added.
+
+ Each contact list optionally has a password attached.
+   -> Empty password
+       Anybody can set this as their public list. (updates allowed?)
+   -> No password
+       Nobody can _attach_ to this list, however, anybody who is
+       already attached can still use the list.
+   -> Password (hashed)
+       User can attach to the list IF they supply the correct password
+       Anybody who is already attached can use the list without a PW.
+
+ Once 'all' users have been attached to a contacts list the pasword can
+ be removed (this means no passwords are stored on the impserver long term)
+
+ Only Contacts lists with a password (or empty pw) would be listed for
+ attachment.
+
+ That sould be reasonably simple and safe, thankyou for your attention.
+
+ NB: Minor addition, while checking bugzilla I had the thought that the
ability
+ to upload and download the contacts list to the browser would be nice.
+ The format isn't really relevent except that it must be simple (tab
seperated?)
+



----- End forwarded message -----


-chuck

--
Charles Hagenbuch, <chuck at horde.org>
The alligators were there, too, in a bathtub inside the house.