From 0fafda55d633401c1eeadcbfafd9ae251234787a Mon Sep 17 00:00:00 2001
From: smizrahi <seb.mizrahi@gmail.com>
Date: Tue, 2 Apr 2024 18:55:30 +0200
Subject: [PATCH] fix(calendar): Fix issue where a calendar's subscribed user
 can give acl to another user

---
 SoObjects/SOGo/SOGoObject.m | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/SoObjects/SOGo/SOGoObject.m b/SoObjects/SOGo/SOGoObject.m
index bd61ac156..a9baf5185 100644
--- a/SoObjects/SOGo/SOGoObject.m
+++ b/SoObjects/SOGo/SOGoObject.m
@@ -1425,8 +1425,9 @@
 	  
 	  allRoles = [self _davGetRolesFromRequest: node];
 	  for (i = 0; i < [allUsers count]; i++)
-	    {
-	      [self setRoles: allRoles
+	    { 
+        if ([[[context activeUser] login] isEqualToString: owner])
+	        [self setRoles: allRoles
                      forUser: [allUsers objectAtIndex: i]];
 	    }
 	  result = @"";