amorfo77/sogo
1
0
Fork 0
mirror of https://github.com/inverse-inc/sogo.git synced 2026-04-14 09:48:51 +00:00
Code Issues Projects Releases Wiki Activity

Don't expose Web calendars to other users

Browse Source 
Fixes #4331
This commit is contained in:
Francis Lachapelle
2017-11-16 11:41:36 -05:00
parent 5d3b1b0dc0
commit 4e04d895cd
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
NEWS
View File

@@ -17,6 +17,7 @@ Bug fixes
- [core] correctly handle "Last day of the month" recurrence rule
- [core] fixed yearly recurrence calculator with until date
- [core] generalized HTML sanitization to avoid encoding issues when replying/forwarding mails
- [core] don't expose web calendars to other users (#4331)
- [eas] avoid sync requests for shared folders every second (#4275)
2.3.22 (2017-07-20)

3
SoObjects/Appointments/SOGoAppointmentFolders.m
View File

@@ -659,7 +659,8 @@ static SoSecurityManager *sm = nil;
for (count = 0; count < max; count++)
{
folder = [folders objectAtIndex: count];
if ([folder folderPropertyValueInCategory: @"WebCalendars"])
if ([folder folderPropertyValueInCategory: @"WebCalendars"
forUser: [SOGoUser userWithLogin: owner]])
{
name = [folder nameInContainer];
if (isWebRequest)