See ChangeLog

Monotone-Parent: 4822220bb92ce7ebcbd47af90d5aad37bb750ed0
Monotone-Revision: a116eb415302838655699ddf23cdf5a3930aef29

Monotone-Author: ludovic@Sophos.ca
Monotone-Date: 2011-10-03T19:00:50
Monotone-Branch: ca.inverse.sogo

ChangeLog

@@ -1,3 +1,9 @@
+2011-10-03  Ludovic Marcotte  <lmarcotte@inverse.ca>
+
+	* SoObjects/Appointments/SOGoAppointmentObject.m (-PUTAction:)
+	We compare sequence numbers to make sure we correctly accept
+	invitation replies for the "right" objects
+
 2011-09-30  Wolfgang Sourdeau  <wsourdeau@inverse.ca>
 
 	* OpenChange/MAPIStoreMailMessage.m (-getMessageData:inMemCtx:):

SoObjects/Appointments/SOGoAppointmentObject.m

@@ -1833,6 +1833,13 @@
 	      
 	      attendee = [newEvent userAsAttendee: [SOGoUser userWithLogin: owner]];
 	      
+	      // We first check of the sequences are alright. We don't accept attendees
+	      // accepting "old" invitations. If that's the case, we return a 403
+              if ([[newEvent sequence] intValue] < [[oldEvent sequence] intValue])
+		return [NSException exceptionWithHTTPStatus:403
+				    reason: @"sequences don't match"];
+	      
+
 	      delegate = nil;
 	      delegateEmail = [attendee delegatedTo];