From 36d564452ec8ff3f86305de0b718d9299ba27950 Mon Sep 17 00:00:00 2001
From: Andrew McMillan <andrew@morphoss.com>
Date: Thu, 25 Mar 2010 14:59:40 +1300
Subject: [PATCH] Check for unbind permission on container before DELETE.

---
 inc/caldav-DELETE.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/inc/caldav-DELETE.php b/inc/caldav-DELETE.php
index 73c7e316..0f46e5d1 100644
--- a/inc/caldav-DELETE.php
+++ b/inc/caldav-DELETE.php
@@ -12,7 +12,8 @@ dbg_error_log("delete", "DELETE method handler");
 
 require_once('DAVResource.php');
 $dav_resource = new DAVResource($request->path);
-$dav_resource->NeedPrivilege('DAV::unbind');
+$container = $dav_resource->FetchParentContainer();
+$container->NeedPrivilege('DAV::unbind');
 
 $lock_opener = $request->FailIfLocked();