6.0.0-alpha10
5/14/25

[#12025] Standard share dialog and Kolab access rights
Summary Standard share dialog and Kolab access rights
Queue Kronolith
Queue Version Git master
Type Enhancement
State Accepted
Priority 1. Low
Owners
Requester thomas.jarosch (at) intra2net (dot) com
Created 02/07/2013 (4479 days ago)
Due
Updated 01/27/2016 (3395 days ago)
Assigned 03/01/2013 (4457 days ago)
Resolved
Milestone
Patch No

History
01/27/2016 05:01:55 PM Jan Schneider Type ⇒ Enhancement
State ⇒ Accepted
Priority ⇒ 1. Low
 
08/27/2013 10:40:06 AM Jan Schneider Comment #5 Reply to this comment
We probably need the share backends to provide the list of available 
permissions. Kolab would then habe a combined edit/delete permission.
03/06/2013 10:35:20 AM Thomas Jarosch Comment #4 Reply to this comment
I don't feel comfortable at all with this change, because this 
(obviously) would render the DELETE permission useless and allow 
anyone with EDIT permissions to delete objects.
Any other idea?

The way Kolab works we need the Delete IMAP ACL for the EDIT permission.

03/01/2013 05:03:57 PM Jan Schneider Comment #3
State ⇒ Feedback
Reply to this comment
I don't feel comfortable at all with this change, because this 
(obviously) would render the DELETE permission useless and allow 
anyone with EDIT permissions to delete objects.
02/13/2013 02:38:52 PM Thomas Jarosch Comment #2
New Attachment: 0001-Fix-Horde_Perms-EDIT-permission-for-Kolab-12025.patch Download
Patch ⇒ Yes
Reply to this comment
Patch to fix the issue.

02/07/2013 04:33:26 PM Thomas Jarosch Comment #1
Priority ⇒ 1. Low
Type ⇒ Bug
Summary ⇒ Standard share dialog and Kolab access rights
Queue ⇒ Kronolith
Milestone ⇒
Patch ⇒ No
State ⇒ Unconfirmed
Reply to this comment
Hi,

the standard "share" dialog of kronolith offers two share modes:
"read the events" and "read and edit the events".

For Kolab the "read and edit the events" gets mapped
to these IMAP ACLs: "lrswikxc".

-> The delete right 'd' is missing.

When one tries to edit an event or move it, the user is presented a 
red "Permission denied" box.
To make things worse, the move of an event creates a duplicate entry 
on the server without aborting the whole "transaction". (I guess we 
create the new entry first and then try to delete the old one. I 
haven't looked at the code yet).

Question about the Horde -> Kolab ACL mapping:
Should we add the delete access right if "edit" rights are given for a share?
The way Kolab works we need this to "update" an object.

Thomas

Saved Queries