Tickets :: [#14069] Delete resources and recource groups not possible

6.0.0-beta1

7/16/25

Summary	Delete resources and recource groups not possible
Queue	Kronolith
Queue Version	4.2.8
Type	Bug
State	Resolved
Priority	1. Low
Owners	mrubinsk (at) horde (dot) org
Requester	andre.5tz (at) gmx (dot) de
Created	07/28/2015 (3641 days ago)
Due
Updated	07/30/2015 (3639 days ago)
Assigned	07/28/2015 (3641 days ago)
Resolved	07/30/2015 (3639 days ago)
Github Issue Link
Github Pull Request
Milestone
Patch	No

07/30/2015 03:07:23 AM	Michael Rubinsky	Comment #6 State ⇒ Resolved Priority ⇒ 1. Low	Reply to this comment
The backend was behaving correctly, the UI was not. The permission is "permissive" by default, like most of Horde's permissions. This means that if it's not explicitly added in the permissions interface, the permission is granted. So the users should be able to add and delete. This is now correctly shown in the UI. Will be in Kronolith 4.2.9 - the code in Git for 5.0 isn't affected.

07/30/2015 03:00:47 AM	Git Commit	Comment #5	Reply to this comment
Changes have been made in Git (FRAMEWORK_5_2): commit 6f136e88c4e4a82a0e40f9af4fa6b71d5eb6fec3 Author: Michael J Rubinsky <mrubinsk@horde.org> Date: Wed Jul 29 22:55:12 2015 -0400 ~~Bug: 14069~~ Fix activating the 'delete' button for resources This is not getting enabled in the UI when a non-admin user has the resource_management application permission. kronolith/lib/Calendar/Resource.php \| 7 ++++++- 1 files changed, 6 insertions(+), 1 deletions(-) http://github.com/horde/horde/commit/6f136e88c4e4a82a0e40f9af4fa6b71d5eb6fec3

07/29/2015 01:33:40 PM	Michael Rubinsky	Comment #4 Priority ⇒ 2. Medium	Reply to this comment
Well, this is obviously also a security issue now - permissions need to be enforced on the backend as well. Bumping priority.

07/29/2015 09:41:50 AM	andre (dot) 5tz (at) gmx (dot) de	Comment #3	Reply to this comment
The Support-Team of our Serviceprovider netclusive.de give me a workaround to delete items. Open the "Webdeveloper-Tools" in your browser. There you must edit the html code. Search the row: <input type="button" class="kronolithCalendarDelete horde-delete" value="Delete" style="display: none;" disabled=""> Delete the entries style="display: none;" and disabled="". The button will be displayed. Now you can delete resources and resource-groups. If there happens nothing by clicking delete for the first time, reload the page and redo the process twice. I hope my contribution helps. Best regards andre

07/28/2015 04:07:18 PM	Michael Rubinsky	Comment #2 State ⇒ Assigned Assigned to Michael Rubinsky	Reply to this comment
Indeed. We need to fix honoring the resource_admin permission in FW_5_2. This doesn't affect master, as general permission support was added.

07/28/2015 03:58:49 PM	andre (dot) 5tz (at) gmx (dot) de	Comment #1 Priority ⇒ 1. Low Type ⇒ Bug Summary ⇒ Delete resources and recource groups not possible Queue ⇒ Kronolith Milestone ⇒ Patch ⇒ No State ⇒ Unconfirmed	Reply to this comment
As a normal user, I can create a resource calendar and a resource group. But there ist now way to edit ord delete resources and resource groups. I have tested it in the demo (http://demo.horde.org) and on our webhosting. Create resources ist posible, but there is no button to delte or edit them? Same at resource groups. You can see it in the demo, there ist only the 'cancel'-button. 'Delete' and 'edit' are not shown, they are disabled. The html: <input class="kronolithCalendarDelete horde-delete" type="button" value="Löschen" style="display:none;" disabled=""> If a normal user can create resources and resource groups he should also have the rights to edit or delete them. Best regards andre P.S. I hope you understand my ticket :-)