Fri, 10 Apr 2026 18:48:31 +0000 https://bugs.horde.org/ticket/6778 Unauthenticated access to public calendar subscription URL Issue with public calendars: - Create a calendar - Set calendar permission to SHOW and READ for GUEST - Go to 'Manage Calendars' - Calendar shows up for unauthenticated user when selecting 'Display URL' - PROBLEM - Subscribe to 'Subscription URL' with calendar client (tested with Sunbird) - Client always prompts for username and password (no anonymous, guest read access possible). Should allow read only access without requesting authentication. - Can also be reproduced by accessing subscription URL via browser Thu, 29 May 2008 16:24:47 +0000 https://bugs.horde.org/ticket/6778#t45663 You have to explicitly allow guest access to Kronolith in the Horde Administration -> Permissions interface. Thu, 29 May 2008 16:35:23 +0000 https://bugs.horde.org/ticket/6778#t45664 > You have to explicitly allow guest access to Kronolith in the Horde > Administration -> Permissions interface. Yes, Guest access is set there too. Thu, 29 May 2008 16:53:38 +0000 https://bugs.horde.org/ticket/6778#t45668 I've now reproduced the issue on a second, clean install of Horde + Kronolith. The permission system works fine for the calendar Display URL. However, accessing ANY of the ical Subscription URLs always causes a "Horde WebDAV" prompt for authentication - even if the calendar (and Kronolith) is set up with Guest READ and SHOW rights. It looks like WebDAV is not accepting anonymous GETs. Another issue also shows up: - an anonymous user loads one of the calendar Display URLs - calendars are listed according to permissions - user clicks one of the 'i' info icons - the popup info box is displayed, but shows only a Close button - the calendar Subscription URL is not shown I need to be able to allow users to create public calendars that can be subscribed to without the need for any authentication. Fri, 30 May 2008 08:28:37 +0000 https://bugs.horde.org/ticket/6778#t45689 Hmpf Sun, 06 Jul 2008 17:15:30 +0000 https://bugs.horde.org/ticket/6778#t47265 We have no means to check whether a webdav resource requires authentication or not at the moment. We don't even know in the applications whether a resource doesn't exist at all, or is just hidden because of missing permissions. A solution might be to first try the API calls unauthenticated, and request authentication if it fails. Not sure if this is possible with the HTTP_WebDAV_Server infrastructure though. Thu, 21 Aug 2008 22:22:34 +0000 https://bugs.horde.org/ticket/6778#t48352 Hi, I am doing a similar thing and have this going. I even modified the attend.php to spit out the current status of all attendees so I keep everyone informed. I have multiple external people with various email and calendar apps, and I won't blame Kronolith for what is a very messy business. Keep up the good work. Paul Fri, 19 Sep 2008 00:55:15 +0000 https://bugs.horde.org/ticket/6778#t49014 Duplicate of #7514 Sun, 09 Nov 2008 23:41:47 +0000 https://bugs.horde.org/ticket/6778#t50634