[Kolab-devel] [issue3074] Freebusy trigger fails for other users's calenders.

[Bernhard Reiter]

New submission from Bernhard Reiter <bernhard at intevation.de>:

Kolab Server 2.2.0,        
a pfb trigger like       
       
https://kolabserver.example.org/freebusy/trigger/test2/Calendar/subcalendar.pfb      
should work with the credentials of a user that can write the folder.      
      
To reproduce, you need users test1 and test2.      
Make sure a folder for test2 exists: Calender/subcalendar with type event.      
Give at least write access for this folder to test1.      
      
Try to trigger the fb creating with test1.      
(You can use a client like Kontact for it, Kontact does the right trigger,     
as you can see in the logs.)     
You can also use a web browser with the URL above and enter test1 credentials.   
    
a typical log entry in apache-access.log is    
 x.example.org - test1 at example.org [25/Sep/2008:10:58:27 +0200]    
"GET /freebusy/trigger/ltest2/Calendar/subcalendar.pfb HTTP/1.1" 404 407    
   
This is critical, because it will lead free-busy lists which might be  
less accurate than they should be. Depending on the usage pattern this 
can be harmful.

----------
assignedto: thomas
messages: 16796
nosy: bernhard, thomas, wilde, wrobel
priority: critical
status: unread
title: Freebusy trigger fails for other users's calenders.
topic: prokde35, server
___________________________________________________
Kolab issue tracker <kolab-issues at intevation.de>
<https://www.intevation.de/roundup/kolab/issue3074>
___________________________________________________