mirror of
https://github.com/inverse-inc/sogo.git
synced 2026-05-30 15:45:26 +00:00
* SoObjects/Appointments/SOGoAppointmentObject.m (_handleResourcesConflicts):
Deny access to resources if the resource's ACL don't allow the organizer to read its freebusy info. Without this, sogo would always auto-accept invitations from 'unprivileged' users, potentially bypassing the multiplebooking parameter. Monotone-Parent: 8ac367dca61f0a4a66df59c7c786dd0f5016050d Monotone-Revision: 1f2bd4b4727f3158ab77ca76322cd555967d326a Monotone-Author: jraby@inverse.ca Monotone-Date: 2012-05-15T14:36:52
This commit is contained in:
@@ -1,3 +1,11 @@
|
||||
2012-05-15 Jean Raby <jraby@inverse.ca>
|
||||
|
||||
* SoObjects/Appointments/SOGoAppointmentObject.m (_handleResourcesConflicts):
|
||||
Deny access to resources if the resource's ACL don't allow the organizer
|
||||
to read its freebusy info.
|
||||
Without this, sogo would always auto-accept invitations from 'unprivileged'
|
||||
users, potentially bypassing the multiplebooking parameter.
|
||||
|
||||
2012-05-14 Wolfgang Sourdeau <wsourdeau@inverse.ca>
|
||||
|
||||
* UI/WebServerResources/UIxContactsUserFolders.js: folder ids are
|
||||
|
||||
Reference in New Issue
Block a user