[turba] Readonly flag

[Jan Schneider]

Zitat von Claude Tompers <claude.tompers at restena.lu>:

> On 09/12/2012 12:29 PM, Jan Schneider wrote:
>>
>> Zitat von Claude Tompers <claude.tompers at restena.lu>:
>>
>>> On 09/11/2012 06:54 PM, Michael J Rubinsky wrote:
>>>>
>>>> Quoting Claude Tompers <claude.tompers at restena.lu>:
>>>>
>>>>> On 09/11/2012 02:57 PM, Michael J Rubinsky wrote:
>>>>>>
>>>>>> Quoting Claude Tompers <claude.tompers at restena.lu>:
>>>>>>
>>>>>>> On 09/11/2012 10:34 AM, Claude Tompers wrote:
>>>>>>>> Hi,
>>>>>>>>
>>>>>>>> I just had a user complaining about an error message : QUERY
>>>>>>>> FAILED:
>>>>>>>> INSERT command denied to user ...
>>>>>>>>
>>>>>>>> backends.local.php sets $cfgSources['restena']['readonly'] = true;
>>>>>>>> for
>>>>>>>> this addressbook.
>>>>>>>>
>>>>>>>> Why is turba still trying to do an insert query with that flag
>>>>>>>> set ?
>>>>>>
>>>>>> Do you have any other sources defined? In either
>>>>>> backends.local.php or
>>>>>> backends.php?
>>>>> Only the standard 'localsql' Horde Addressbook.
>>>>
>>>> Well, then it's very likely that this is the source that the write is
>>>> being attempted to, and your database's 'horde' user does not have
>>>> INSERT permissions granted. You'll have to get the exact SQL statement
>>>> being performed to be sure.
>>> I'm sorry, I don't know if I made the setup very clear. There are in
>>> fact 2 sources :
>>>
>>> 1) localsql for users personal addressbooks, where they can read and
>>> write
>>> 2) restena, containing all our users, but this is readonly.
>>>
>>> The mysql user performing queries on the restena addressbook has only
>>> select rights and should not need more as the addressbook is readonly
>>> anyway.
>>>
>>> Now one of our users selected restena addressbook as standard to add
>>> contact via IMP. That's where he's got the error message containing the
>>> query.
>>>
>>> From a gui point of view, in my opinion, readonly addressbooks shouldn't
>>> even be in a users list of addressbooks to add contacts to.
>>>
>>> regards,
>>> Claude
>>
>> Since you mention backends.local.php, you seem to run Horde 4. This
>> version doesn't have a readonly flag though.
>>
> Oh. Why has this feature been removed ?
> Is there another 'horde-way' to forbid users to edit an addressbook ?

The permission system.