nik/davical
1
0
Fork 0
mirror of https://gitlab.com/davical-project/davical.git synced 2026-07-28 13:09:24 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Reads to /public.php/... will work if the collection is publicly_readable.

Browse Source
This commit is contained in:
Andrew McMillan 2009-04-17 01:04:43 +12:00
parent f65770b7f1
commit 06549086a1
2 changed files with 82 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
htdocs/public.php
View File

@ -8,13 +8,11 @@
* @copyright Catalyst .Net Ltd
* @license http://gnu.org/copyleft/gpl.html GNU GPL v2
*/
require_once("../inc/always.php");
require("../inc/always.php");
dbg_error_log( "caldav", " User agent: %s", ((isset($_SERVER['HTTP_USER_AGENT']) ? $_SERVER['HTTP_USER_AGENT'] : "Unfortunately Mulberry does not send a 'User-agent' header with its requests :-(")) );
dbg_log_array( "headers", '_SERVER', $_SERVER, true );
$session = (object) array(
'username' => 'public',
'user_no' => -1
);
require("PublicSession.php");
$session = new PublicSession();
/** A simplified DAV header in this case */
$dav = "1, 2, calendar-access";
@ -22,6 +20,9 @@ header( "DAV: $dav");
require_once("CalDAVRequest.php");
$request = new CalDAVRequest();
if ( !$request->IsPublic() ) {
$request->DoResponse( 403, translate('Anonymous users may only access public calendars') );
}
switch ( $request->method ) {
case 'OPTIONS': include_once("caldav-OPTIONS.php"); break;

76
inc/PublicSession.php Normal file
View File

@ -0,0 +1,76 @@
<?php
/**
* A Class for faking sessions which are anonymous access to a resource
*
* @package davical
* @subpackage PublicSession
* @author Andrew McMillan <andrew@morphoss.com>
* @copyright Morphoss Ltd
* @license http://gnu.org/copyleft/gpl.html GNU GPL v2 or later
*/
/**
* A Class for handling a public (anonymous) session
*
* @package davical
*/
class PublicSession {
/**#@+
* @access private
*/
/**
* User ID number
* @var user_no int
*/
var $user_no;
/**
* User e-mail
* @var email string
*/
var $email;
/**
* User full name
* @var fullname string
*/
var $fullname;
/**
* Group rights
* @var groups array
*/
var $groups;
/**#@-*/
/**
* The constructor, which just calls the actual type configured
*/
function PublicSession() {
global $c;
$this->user_no = -1;
$this->email = null;
$this->username = 'guest';
$this->fullname = 'Anonymous';
$this->groups = ( isset($c->public_groups) ? $c->public_groups : array() );
$this->roles = array( 'Public' => true );
$this->logged_in = false;
}
/**
* Checks whether a user is allowed to do something.
*
* The check is performed to see if the user has that role.
*
* @param string $whatever The role we want to know if the user has.
* @return boolean Whether or not the user has the specified role.
*/
function AllowedTo ( $whatever ) {
return ( $this->logged_in && isset($this->roles[$whatever]) && $this->roles[$whatever] );
}
}