From 2caea0a39eaf896a89ba4368f942b7783ad4fdb9 Mon Sep 17 00:00:00 2001
From: Carl Bettermann <carl.bettermann@iserv.eu>
Date: Thu, 24 Apr 2025 15:03:41 +0200
Subject: [PATCH 1/2] Set default privileges to none to prevent other users
 from accessing address books

---
 inc/auth-functions.php | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/inc/auth-functions.php b/inc/auth-functions.php
index e8097930..1344dc51 100644
--- a/inc/auth-functions.php
+++ b/inc/auth-functions.php
@@ -106,8 +106,9 @@ function CreateHomeCollections( $username, $default_timezone = null ) {
     // XXX Should we not do this for ROOMS?
     if( !empty($c->home_addressbook_name) )
       $c->default_collections[] = array(
-        'type' => 'addressbook',
-        'name' => $c->home_addressbook_name
+        'type'       => 'addressbook',
+        'name'       => $c->home_addressbook_name,
+        'privileges' => array()
       );
   }
 

From 1647d2b5cd9feeecd4a5b6c302b4bb7faf02e1cb Mon Sep 17 00:00:00 2001
From: Carl Bettermann <carl.bettermann@iserv.eu>
Date: Thu, 24 Apr 2025 15:57:47 +0200
Subject: [PATCH 2/2] changed recommendation in config aswell

---
 config/example-config.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config/example-config.php b/config/example-config.php
index d1c78b0f..941a3566 100644
--- a/config/example-config.php
+++ b/config/example-config.php
@@ -268,7 +268,7 @@ $c->admin_email = 'calendar-admin@example.com';
 //       'type' => 'calendar',
 //       'name' => 'calendar',
 //       'displayname' => '%fn calendar',
-//       'privileges'  => null
+//       'privileges'  => array()
 //     )
 // );